CVE-2012-1885

Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SerAuxErrBar Heap Overflow Vulnerability."...

Microsoft Update Includes Critical Security Update for IE 9, First Patches for Windows 8, RT

Microsoft released its monthly security updates today and put special urgency on a cumulative security update for Internet Explorer 9. Critical vulnerabilities were found in the way the browser handles objects in memory which could lead to an attacker remotely executing code. Victims would have t...

Security Update for Excel 2003 (KB2687481)

A security vulnerability exists in Excel 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

[SECURITY] Fedora 16 Update: catdoc-0.94.2-10.fc16

catdoc is program which reads one or more Microsoft word files and outputs text, contained insinde them to standard output. Therefore it does same work for.doc files, as unix cat command for plain ASCII files. It is now accompanied by xls2csv - program which converts Excel spreadsheet into...

[SECURITY] Fedora 17 Update: catdoc-0.94.2-10.fc17

catdoc is program which reads one or more Microsoft word files and outputs text, contained insinde them to standard output. Therefore it does same work for.doc files, as unix cat command for plain ASCII files. It is now accompanied by xls2csv - program which converts Excel spreadsheet into...

MS12-076: Description of the security update for Excel 2010: November 13, 2012

Describes the security update for Excel 2010, that was released on November 13, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-076 view the complete security bulletin, go to one of the following Microsoft websites: Home...

Microsoft Excel SST Invalid Length Use After Free (MS12-076; CVE-2012-1887)

A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to an error in Microsoft Excel while handling specially crafted Excel files. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted Excel file. Successful...

Microsoft Excel Modified Data Structure Stack Overflow (MS12-076; CVE-2012-2543)

A remote code execution vulnerability has been reported in Microsoft Excel...

Microsoft Excel SerAuxErrBar Heap Overflow (MS12-076; CVE-2012-1885)

A remote code execution vulnerability has been reported in Microsoft Excel...

MS12-076: Description of the security update for Excel 2007 (xlconv-x-none.msp): November 13, 2012

Describes the security update for Excel 2007 xlconv-x-none.msp, that was released on November 13, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-076. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

Microsoft Excel SST Invalid Length Use After Free Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running...

Microsoft Excel CVE-2012-2543 Buffer Overflow Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running...

Microsoft Excel 'SerAuxErrBar' Heap Overflow Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running...

Microsoft Releases November 2012 Security Bulletin

Microsoft has released updates to address multiple vulnerabilities in Microsoft Windows Shell, .NET Framework, Windows Kernel-Mode drivers, Excel, Internet Information Services IIS, and cumulative security updates for Internet Explorer as part of the Microsoft Security Bulletin Summary for Novemb...

MS12-076: Description of the security update for Excel Viewer: November 13, 2012

Describes the security update for the Excel Viewer, that was released on November 12, 2013.INTRODUCTIONMicrosoft has released security bulletin MS12-076. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

Microsoft Excel CVE-2012-1886 Memory Corruption Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running...

MS12-076: Vulnerabilities in Microsoft Excel could allow remote code execution: November 13, 2012

Fixes the vulnerabilities in Microsoft Excel that could allow remote code execution, that was released on November 13, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-076. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

Microsoft Excel Malformed File Memory Corruption (MS12-076; CVE-2012-1886)

A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to an error in Microsoft Excel while handling specially crafted Excel files. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted Excel file. Successful...

Microsoft Office Excel 2013 memory corruption

memory corruption during the handling of the xls files a context-dependent attacker can execute arbitrary code. Title : Microsoft Office Excel 2013 memory corruption Version : Microsoft Office professional Plus 2013 Date : 2012-11-10 Vendor : http://office.microsoft.com Impact : Med/High Contact ...

Microsoft Excel 2007 - WriteAV Crash (PoC)

Title : Microsoft Office Excel 2007 WriteAV Vulnerability Version : Microsoft Office professional Plus 2007 SP2 Date : 2012-11-08 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ---- memory corruption duri...