CVE-2009-3131: Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML Fil...

Security readout for executives and security teams

This is an old Microsoft Excel remote code execution issue. A malicious spreadsheet with a crafted formula could cause vulnerable Office or Excel viewer components to run attacker-controlled code. Business urgency depends on whether legacy Office versions, Mac converters, viewers, or compatibility packs remain in use. Exposure is most likely in legacy endpoints, virtual desktops, kiosks, file-processing workflows, or archives that still use the listed Microsoft Office, Excel Viewer, Mac converter, or compatibility pack versions. Prioritize discovery and remediation if any listed legacy Office components remain in production. The risk is high because successful exploitation could execute code, but urgency is lower where these products are fully retired or patched. Mitigation focus: Review Microsoft MS09-067 and apply the vendor-provided security updates for affected Office components.; Retire or isolate unsupported Office, Excel Viewer, converter, and compatibility pack versions still in use.; Restrict opening untrusted spreadsheet files on systems that cannot be remediated immediately..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.