coldbraid

CVE-2009-0557 Microsoft Office

Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.

CVSS
not scored

CWE-94

On CISA’s exploited list

Microsoft Office Object Record Corruption Vulnerability

Added
2022-06-08
Federal patch deadline
2022-06-22
Ransomware use
not known