Microsoft Excel内存破坏漏洞(CVE-2013-1315)(MS13-073)

BUGTRAQ ID: 62167 CVECAN ID: CVE-2013-1315 Excel是微软公司的办公软件的试算表软件组件。 Microsoft Excel 分析 Excel 文件中的内容的方式中存在一个远程执行代码漏洞。成功利用此漏洞的攻击者可以完全控制受影响的系统。 0 Microsoft Office 2013 Microsoft Office 2010 Microsoft Office 2007 Microsoft Office 2003 临时解决方法： 如果您不能立刻安装补丁或者升级，Sebug建议您采取以下措施以降低威胁： 使用 Microsoft Office...

CVE-2013-1315

Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service...

CVE-2013-3159

Microsoft Excel 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Excel Viewer; and Microsoft Office Compatibility Pack SP3 allow remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Enti...

CVE-2013-3158

Microsoft Excel 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

Memory corruption

Microsoft Excel 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

Xxe

Microsoft Excel 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Excel Viewer; and Microsoft Office Compatibility Pack SP3 allow remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Enti...

Memory corruption

Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service...

CVE-2013-3158

CVE-2013-3158 affects Microsoft Excel 2003 SP3 and 2007 SP3, where memory corruption in parsing crafted Office documents can lead to remote code execution or denial of service. Root cause is memory corruption within Excel’s handling of Office file content. Exploitation details are not provided in...

CVE-2013-3159

CVE-2013-3159 stems from an XML External Entity (XXE) issue affecting Microsoft Excel 2003 SP3, 2007 SP3, and 2010 SP1/SP2, as well as Excel Viewer and Microsoft Office Compatibility Pack SP3. The vulnerability enables a remote attacker to read arbitrary files by delivering an XML document contai...

CVE-2013-1315

CVE-2013-1315 is a remote code execution/memory corruption vulnerability affecting Microsoft Office components. The public records identify affected products as Microsoft SharePoint Server 2007 SP3, 2010 SP1/SP2, 2013; Office Web Apps 2010; Excel 2003 SP3/2007 SP3/2010 SP1/SP2/2013/2013 RT; Offic...

CVE-2013-3158

Microsoft Excel 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2013-3159

Microsoft Excel 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Excel Viewer; and Microsoft Office Compatibility Pack SP3 allow remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Enti...

Microsoft Office Excel Viewer Remote Code Execution Vulnerabilities (2858300)

This host is missing an important security update according to Microsoft Bulletin MS13-073. OpenVAS Vulnerability Test $Id: secpodmsexcelviewerms13-073.nasl 6115 2017-05-12 09:03:25Z teissa $ Microsoft Office Excel Viewer Remote Code Execution Vulnerabilities 2858300 Authors: Antu Sanadi Copyrigh...

Microsoft Office Excel Remote Code Execution Vulnerabilities (2858300)

This host is missing an important security update according to Microsoft Bulletin MS13-073. OpenVAS Vulnerability Test $Id: secpodmsexcelms13-073.nasl 6104 2017-05-11 09:03:48Z teissa $ Microsoft Office Excel Remote Code Execution Vulnerabilities 2858300 Authors: Antu Sanadi Copyright: Copyright ...

MS13-073: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2858300))

The remote Windows host is running a version of Microsoft Excel that is affected by the following vulnerabilities : - Two memory corruption vulnerabilities exist due to the way the application handles objects in memory when parsing Office files. CVE-2013-1315 / CVE-2013-3158 - An information...

Microsoft Office Excel Remote Code Execution Vulnerabilities (2858300)

This host is missing an important security update according to Microsoft Bulletin MS13-073. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2013-3072 · Microsoft · Office Web Apps +5

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server versions 2007 SP3, 2010 SP1 and SP2, and 2013 Office Web Apps 2010 Excel versions 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT Office for Mac 2011 Excel Viewer Office Compatibility Pack SP3 Description: ...

Microsoft Office Excel Viewer Remote Code Execution Vulnerabilities (2858300)

This host is missing an important security update according to Microsoft Bulletin MS13-073. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS13-073: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2858300) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Excel that is affected by the following vulnerabilities : - Two memory corruption vulnerabilities exist due to the way the application handles objects in memory when parsing Office files. CVE-2013-1315 / CVE-2013-3158 - An information...

Microsoft Excel CVE-2013-1315 Memory Corruption Vulnerability

Description Microsoft Excel is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Excel 2003 SP3 Microsoft...