$ cve CVE-2009-3129 JSON

CVE-2009-3129 KEV EXPLOIT

7.8

HIGH · CVSS 3.1 · EPSS 84% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2022-03-24.

Description

Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset, aka "Excel Featheader Record Memory Corruption Vulnerability."

Scoring

CVSS	7.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS	84.03% — more likely to be exploited than 100% of all CVEs
Weakness	CWE-787
On CISA KEV	yes — remediate by 2022-03-24
Public exploit	yes
Published	2009-11-11
Last modified	2026-06-16

CISA KEV

Name	Microsoft Excel Featheader Record Memory Corruption Vulnerability
Added	2022-03-03
Due	2022-03-24
Vendor / product	Microsoft / Excel
Ransomware use	none reported

Affected (4)

Vendor	Product
microsoft	excel
microsoft	excel viewer
microsoft	office
microsoft	open xml file format converter

Public exploits

Source	Title	Date
exploit-db	Microsoft Excel - Malformed FEATHEADER Record (MS09-067) (Metasploit)	2010-09-25
exploit-db	Microsoft Excel - FEATHEADER Record (MS09-067)	2010-08-21

References

→ the Explorer · watch your stack · NVD