CVE-2009-0557 — Microsoft Office Object Record Corruption Vulnerability

provenance: imported · CVE: CVE-2009-0557

CVE-2009-0557: Microsoft Office Object Record Corruption Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Microsoft
Product	Office
Date added	2022-06-08
Due date	2022-06-22
Ransomware campaign use	Unknown

Description

Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2009-0557

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2009-0557
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog