CVE-2009-3127

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel 2002 SP3 and 2003 SP3 Office 2004 and 2008 for Mac Open XML File Format Converter for Mac Office Excel Viewer 2003 SP3

Description: A remote code execution issue exists in the way Microsoft Office Excel handles specially crafted Excel files, allowing attackers to execute arbitrary code via a crafted spreadsheet. This could enable an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations: For Microsoft Office Excel 2002 SP3, update to a version that properly parses the Excel file format to prevent arbitrary code execution. For Microsoft Office Excel 2003 SP3, update to a version that properly handles specially crafted Excel files. For Office 2004 and 2008 for Mac, update to a version that correctly parses the Excel file format. For Open XML File Format Converter for Mac, update to a version that properly handles Excel files. For Office Excel Viewer 2003 SP3, update to a version that correctly handles specially crafted Excel files.