CVE-2009-0558

Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers…

published June 10, 2009

CVSS
—
EPSS
31%
Percentile
98.3
In the wild
Unconfirmed
What it is

⚠️ A crafty Excel file could lead to chaos! A simple array index error in Microsoft Office can allow remote code execution, transforming spreadsheets into gateways for attackers. 💻 Think of it like a recipe that calls for the wrong ingredient amount — if a chef doesn't check the measurements, the dish could be ruined, or worse, something might get burned! An attacker could create a specially crafted Excel file that, when opened, runs arbitrary code on your machine. This means they could potentially access sensitive data, install malware, or even take over your system — all from a seemingly innocent spreadsheet!

Put simply

Think of it like a recipe that calls for the wrong ingredient amount — if a chef doesn't check the measurements, the dish could be ruined, or worse, something might get burned! This vulnerability arises from an array index error in Excel, specifically in Microsoft Office 2000 SP3, Office 2004 and 2008 for Mac, and the Open XML File Format Converter for Mac. It allows remote attackers to execute arbitrary code by exploiting malformed record objects in an Excel file.

What to do

An attacker could create a specially crafted Excel file that, when opened, runs arbitrary code on your machine. This means they could potentially access sensitive data, install malware, or even take over your system — all from a seemingly innocent spreadsheet! To protect yourself, ensure that you are using the latest updates for your Office applications, especially moving away from the older versions mentioned. If you've got systems relying on those, consider transitioning to newer, supported alternatives. 🛡️ You've got this! Stay vigilant and keep your software updated to protect your data! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.31070 · 98.3th percentile
Published
2009-06-10T18:00Z
EPSS history
Timeline
  • 10 JUN 18:00Z
    Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers…
    cvelistv5