CVE-2009-0558

Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Array Indexing Memory Corruption Vulnerability."

• CWE-94

• http://osvdb.org/54954
• http://secunia.com/secunia_research/2009-1/Vendor Advisory
• http://www.securityfocus.com/archive/1/504188/100/0/threaded
• http://www.securityfocus.com/bid/35242
• http://www.securitytracker.com/id?1022351
• http://www.us-cert.gov/cas/techalerts/TA09-160A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2009/1540
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11525
• http://osvdb.org/54954
• http://secunia.com/secunia_research/2009-1/Vendor Advisory
• http://www.securityfocus.com/archive/1/504188/100/0/threaded
• http://www.securityfocus.com/bid/35242
• http://www.securitytracker.com/id?1022351
• http://www.us-cert.gov/cas/techalerts/TA09-160A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2009/1540
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11525

Published

Jun 10, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0552Unspecified vulnerability in Microsoft Internet Explorer 5.0…
• CVE-2009-0553Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2…
• CVE-2009-0554Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Wind…8.8
• CVE-2009-0555Microsoft Windows Media Runtime, as used in DirectShow WMA V…
• CVE-2009-0556Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3…8.8
• CVE-2009-0557Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 20…7.8
• CVE-2009-0559Stack-based buffer overflow in Excel in Microsoft Office 200…
• CVE-2009-0560Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 20…
• CVE-2009-0561Integer overflow in Excel in Microsoft Office 2000 SP3, Offi…
• CVE-2009-0562The Office Web Components ActiveX Control in Microsoft Offic…
• CVE-2009-0563Stack-based buffer overflow in Microsoft Office Word 2002 SP…7.8
• CVE-2009-0565Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3,…