CVE-2009-3129
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.
CISA Known Exploited Vulnerability
Vendor / Product
Microsoft — Excel
Date Added
2022-03-03
Remediation Due
2022-03-24
https://nvd.nist.gov/vuln/detail/CVE-2009-3129
Weakness Classification (1)
Affected Software (10)
| Vendor | Product | Version |
|---|---|---|
| microsoft | excel | 2002 |
| microsoft | excel | 2003 |
| microsoft | excel | 2007 |
| microsoft | excel | 2007 |
| microsoft | excel_viewer | - |
| microsoft | excel_viewer | - |
| microsoft | excel_viewer | 2003 |
| microsoft | office | 2004 |
| microsoft | office | 2008 |
| microsoft | open_xml_file_format_converter | * |
References & Advisories (11)
US Government Resource
Third Party Advisory
VDB Entry
Third Party Advisory
US Government Resource
Patch
Vendor Advisory
Exploit
Third Party Advisory
VDB Entry
Broken Link
Third Party Advisory
VDB Entry
Broken Link
Third Party Advisory
VDB Entry
Broken Link
Broken Link
Broken Link
Broken Link