CVE-2009-3129 — Microsoft Excel Featheader Record Memory Corruption Vulnerability

CISA KEVExploited: confirmedMicrosoft

Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.

Vulnerability details

Affected productsExcel
KEV remediation due2022-03-24