CVE-2009-0559: Stack-based buffer overflow in Excel in Microsoft Office 2000 SP3 and Office XP SP3 allows remote attackers...

Security readout for executives and security teams

This is an old Microsoft Excel flaw where a specially crafted spreadsheet could cause Excel to run attacker-controlled code. The business risk is mainly for organizations still using Microsoft Office 2000 SP3 or Office XP SP3, especially where users can open untrusted Excel files. Exposure is likely limited to legacy environments retaining Office 2000 SP3 or Office XP SP3. Modern Office versions are not identified as affected in the provided sources. Treat this as high priority only if legacy Office remains in production. The main task is discovery and removal, because document-based code execution can lead to endpoint compromise. Mitigation focus: Apply Microsoft guidance and security updates from MS09-021 for affected Office installations.; Remove or isolate Office 2000 SP3 and Office XP SP3 where updates cannot be confirmed.; Restrict opening of unsolicited Excel files on systems running affected legacy Office versions..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.