This host is missing a critical security update according to Microsoft Bulletin MS09-021.

Successful exploitation could execute arbitrary code on the remote system and corrupt memory, buffer overflow via a specially crafted Excel file. Impact Level: System/Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link. http://www.microsoft.com/technet/security/bulletin/ms09-021.mspx

The flaws are due to - an array-indexing error when processing certain records by using corrupted object. - a boundary error when parsing certain records by opening a specially crafted Excel file. - an integer overflow error when processing the number of strings in a file.

Microsoft Excel Viewer 2003/2007 Microsoft Office Excel 2000/2002/2003/2007

• http://secunia.com/advisories/35364
• http://support.microsoft.com/kb/969462
• http://www.microsoft.com/technet/security/bulletin/ms09-021.mspx

---

Updated on 2015-03-25