CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2009-02-25
Microsoft Excel Invalid Object Reference Remote Code Execution Vulnerability (CVE-2009-0238) Advisory
[Affected Scope] Microsoft Office Excel 2000 through 2007, Excel Viewer, Office for Mac 2004/2008, and Compatibility Pack.
[Impact] Opening a specially crafted Excel document can trigger an access attempt on an invalid object, allowing remote attackers to execute arbitrary code.
[Mitigation] Apply the official Microsoft security patches immediately and restrict opening untrusted Excel attachments.