Microsoft Open XML File Format Converter vulnerabilities

81 CVEs affecting Microsoft Open XML File Format Converter, 4 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-1989, published 2011-09-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-3333: Microsoft Office Stack-based Buffer Overflow Vulnerability, published 2010-11-10. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 89.4% chance of exploitation in the next 30 days. Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac…
CVE-2009-3129: Microsoft Excel Featheader Record Memory Corruption Vulnerability, published 2009-11-11. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 84% chance of exploitation in the next 30 days. Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2;…
CVE-2009-0563: Microsoft Office Buffer Overflow Vulnerability, published 2009-06-10. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-06-08. EPSS: 62.8% chance of exploitation in the next 30 days. Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word…
CVE-2009-0557: Microsoft Office Object Record Corruption Vulnerability, published 2009-06-10. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-06-08. EPSS: 53% chance of exploitation in the next 30 days. Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac;…
CVE-2011-0105, published 2011-04-13. High severity, CVSS 9.3. EPSS: 70.2% chance of exploitation in the next 30 days. Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers…
CVE-2010-0822, published 2010-06-08. High severity, CVSS 9.3. EPSS: 70.1% chance of exploitation in the next 30 days. Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code…
CVE-2010-0258, published 2010-03-10. High severity, CVSS 7.8. EPSS: 61% chance of exploitation in the next 30 days. Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack…
CVE-2011-0104, published 2011-04-13. High severity, CVSS 9.3. EPSS: 53.4% chance of exploitation in the next 30 days. Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2008-3471, published 2008-10-15. High severity, CVSS 9.3. EPSS: 52.3% chance of exploitation in the next 30 days. Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word,…
CVE-2009-0565, published 2009-06-10. High severity, CVSS 9.3. EPSS: 40.5% chance of exploitation in the next 30 days. Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; and Microsoft Office Compatibility…

Latest

CVE-2011-1989, published 2011-09-15. High severity, CVSS 9.3. EPSS: 27.8% chance of exploitation in the next 30 days. Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for…
CVE-2011-1988, published 2011-09-15. High severity, CVSS 9.3. EPSS: 18.6% chance of exploitation in the next 30 days. Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel,…
CVE-2011-1987, published 2011-09-15. High severity, CVSS 9.3. EPSS: 20.5% chance of exploitation in the next 30 days. Array index error in Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File…
CVE-2011-1279, published 2011-06-16. High severity, CVSS 9.3. EPSS: 17% chance of exploitation in the next 30 days. Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which…
CVE-2011-1277, published 2011-06-16. High severity, CVSS 9.3. EPSS: 16.1% chance of exploitation in the next 30 days. Microsoft Excel 2002 SP3, Office 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote…
CVE-2011-1276, published 2011-06-16. High severity, CVSS 9.3. EPSS: 28.2% chance of exploitation in the next 30 days. Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word,…
CVE-2011-1275, published 2011-06-16. High severity, CVSS 9.3. EPSS: 13.3% chance of exploitation in the next 30 days. Microsoft Excel 2002 SP3; Office 2004, 2008, and 2011 for Mac; and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which…
CVE-2011-1274, published 2011-06-16. High severity, CVSS 9.3. EPSS: 13.3% chance of exploitation in the next 30 days. Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint…
CVE-2011-1273, published 2011-06-16. High severity, CVSS 9.3. EPSS: 17% chance of exploitation in the next 30 days. Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel,…
CVE-2011-1272, published 2011-06-16. High severity, CVSS 9.3. EPSS: 17.6% chance of exploitation in the next 30 days. Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint…