CVE-2009-3130: Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML F...

Security readout for executives and security teams

CVE-2009-3130 is a remote code execution risk in older Microsoft Excel and Office for Mac components. A malicious spreadsheet can trigger memory corruption when parsed, potentially letting an attacker run code with the user's privileges. Business urgency depends on whether these legacy products or converters remain in use. Exposure is most likely where legacy Excel 2002 SP3, Office 2004 or 2008 for Mac, or the Open XML File Format Converter for Mac remain installed and process untrusted spreadsheets. Treat this as high priority only if affected legacy Office software is still present. The risk is serious because it can turn a spreadsheet into code execution, but the affected products are old and exposure should be measurable by inventory. Mitigation focus: Identify and retire affected legacy Microsoft Office products where possible.; Review and apply Microsoft guidance in MS09-067 for affected systems.; Restrict opening spreadsheets from untrusted or unexpected sources..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.