← Database

CVE-2009-1134

CRITICAL CVSS: 9.3 Published: 2009-06-10 Modified: 2026-06-16

Description

Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a BIFF file with a malformed Qsir (0x806) record object, aka "Record Pointer Corruption Vulnerability."

Affected Platforms

Microsoft Office Excel ViewerMicrosoft Office Sharepoint ServerMicrosoft Office Compatibility Pack For Word Excel Ppt 2007Microsoft Open Xml File Format ConverterMicrosoft Office ExcelMicrosoft Office

Weakness Type

CWE-94

References