Sploitus

5 exploited vulnerabilities in Office Web Components

Vulnerabilities with publicly known exploits

Vendors
Microsoft
With known exploits
5
Affected Microsoft Isa Server versions
= 2004, 2006
Affected Microsoft Office versions
All versions
Affected Microsoft Office Web Components versions
= 2000, 2003, xp, 2002
Affected Microsoft Office Xp versions
= SP3

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2009-1534 8 exploits
CVSS 9.3 HIGH 2009-08-12FIX AVAILABLE
Microsoft OWC Spreadsheet - HTMLURL Buffer Overflow (MS09-043) (Metasploit)Microsoft OWC Spreadsheet HTMLURL Buffer Overflow
CVE-2009-1136 11 exploits
CVSS 9.3 HIGH 2009-07-15FIX AVAILABLE
Microsoft Office Web Components (OWC) Spreadsheet - msDataSourceObject Memory Corruption (MS09-043) (Metasploit)Microsoft OWC Spreadsheet msDataSourceObject Memory Corruption
CVE-2002-1340
CVSS 5.0 MEDIUM 2002-12-11FIX AVAILABLE
CVE-2002-1339
CVSS 5.0 MEDIUM 2002-12-11
CVE-2002-1338
CVSS 5.0 MEDIUM 2002-12-11