Check Point Advisories

Microsoft Excel Row Record Heap Buffer Overflow - Ver2 (CVE-2009-3130)

Check Point Reference:	CPAI-2014-0803
Date Published:	3 Feb 2014
Severity:	Critical
Last Updated:	Wednesday 01 January, 2014
Source:	CVE-2009-3130
Protection Provided by:
Who is Vulnerable?
Vulnerability Description	A buffer overflow vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could exploit this vulnerability by convincing a victim to open a specially crafted Excel spreadsheet file that includes a malformed BIFF record. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.