Live › vulnerability › CVE-2009-3129
Go to dashboardExcel FEATHEADER record memory corruption (CVE-2009-3129): opening a crafted .xls runs code as the user. Fixed by Microsoft MS09-067 in Nov 2009. Only matters for legacy, unpatched Office; listed in CISA KEV as exploited.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Excel | vendor | – | – |
| Microsoft Office Excel | vendor | 2002 SP3, 2003 SP3, 2007 SP1/SP2, Excel Viewer, Compatibility Pack SP1/SP2, Office 2004/2008 for Mac, Open XML Converter for Mac | KB973471, KB973475, KB973593 + KB973704, KB973484, KB973707, KB976830, KB976828, KB976831 |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset, aka "Excel Featheader Record Memory Corruption Vulnerability."
This page as .md · .json · in your agent: get_signal("CVE-2009-3129")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.