iDefense Security Advisory 12.10.08: Microsoft Excel Malformed Object Memoy Corruption Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 12.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 09, 2008 I. BACKGROUND Excel is the spreadsheet application included with Microsoft Corp.'s Office productivity software suite. More information is availabl...

Microsoft Excel畸形对象解析远程代码执行漏洞（MS08-074）

BUGTRAQ ID: 32618,32622,32621 CVECAN ID: CVE-2008-4265,CVE-2008-4266,CVE-2008-4264 Excel是微软Office套件中的电子表格工具。 Excel在解析记录和公式时存在多个内存破坏漏洞，在验证NAME记录中的索引值时存在栈破坏漏洞。如果用户打开带有畸形对象的特制Excel文件，这些漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Excel Viewer 2003 SP3...

CVE-2008-4265

CVE-2008-4265 affects Microsoft Office Excel 2000 SP3, where parsing certain TXO/OBJ records can trigger a memory corruption vulnerability that permits remote code execution when a specially crafted Excel file is opened. The root cause is memory corruption during loading of records from the sprea...

MS08-074: Microsoft Excel Multiple Method Remote Code Execution (959070)

The remote host is running a version of Microsoft Excel that is subject to various flaws that may allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it...

CVE-2007-4265

VisionProject 3.1 and earlier suffer multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via specific parameters: projectIssueId (EditProjectIssue.do), projectId (ProjectSelected.do), folderId (ProjectDocuments.do), and sortField ...

CVE-2006-4265

CVE-2006-4265 affects Kaspersky Anti-Hacker 1.8.180 where enabling Stealth Mode permits remote attackers to obtain ICMP responses for timestamp and netmask requests, contrary to Stealth Mode documentation. The issue exposes partial confidentiality (unauthorized ICMP data exposure) without details...

CVE-2005-4265

...

CVE-2005-4265

CVE-2005-4265 is a duplicate of CVE-2005-4209. The connected CVE-2005-4209 documents a cross-site scripting (XSS) vulnerability in WorldClient webmail for Alt-N MDaemon 8.1.3, where script tags in the Subject header can block user access to the Inbox. No additional details for 4265 are provided i...