ZeroDay Findings
Sign inSign up

Findings

CVE-2009-3129

Microsoft Excel Featheader Record Memory Corruption Vulnerability

Published Nov 11, 2009 · updated Jun 16, 2026 · microsoft excel

Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset, aka "Excel Featheader Record Memory Corruption Vulnerability."

Timeline

Detection, updates, and resolution for this record.

  1. Nov 11, 2009 · Catalog

    Detected

    Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an inv

  2. Mar 3, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Mar 24, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an inv

Required action

Apply updates per vendor instructions.

CISA due date Mar 24, 2022

Affected

  • cpe microsoft/excel2002
  • cpe microsoft/excel2003
  • cpe microsoft/excel2007
  • cpe microsoft/excel viewerversion unspecified
  • cpe microsoft/excel viewer2003
  • cpe microsoft/office2004
  • vendor Microsoft Excelversion unspecified

Sources

  • CISA KEVCVE-2009-3129

    Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.

    cisa.gov
  • CVE.orgCVE-2009-3129

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2009-3129

    30-day exploitation probability 84.0%

    first.org
  • Exploit Database14706

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Exploit Database16625

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Metasploit Modulesexploit_windows/fileformat/ms09_067_excel_featheader

    Public module reference (good). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2009-3129

    Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP

    nvd.nist.gov

References