ZDI-11-346 : Microsoft Office 2007 Office Art Shape Record Hierarchy Parsing Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-346 : Microsoft Office 2007 Office Art Shape Record Hierarchy Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-346 December 13, 2011 - -- CVE ID: CVE-2011-3413 - -- CVSS: 7.5,...

Microsoft Excel远程代码执行漏洞(MS11-096)

BUGTRAQ ID: 50954 CVE ID: CVE-2011-3403 Excel是微软公司的办公软件Microsoft office的组件之一，是由Microsoft为Windows和Apple Macintosh操作系统的电脑而编写和运行的一款试算表软件。 Excel在处理特制Excel文件的实现上存在远程代码执行漏洞，成功利用后可允许攻击者以当前用户权限执行任意代码。 Microsoft Excel 2003 SP3 Microsoft Office 2004 for Mac 0 临时解决方法： 在Excel 2003中设置Office文件验证以禁止打开没有通过验证的文件。...

CVE-2011-3403

Microsoft Excel 2003 SP3 and Office 2004 for Mac do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet, aka "Record Memory Corruption Vulnerability."...

Memory corruption

Microsoft Excel 2003 SP3 and Office 2004 for Mac do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet, aka "Record Memory Corruption Vulnerability."...

CVE-2011-3403

CVE-2011-3403 affects Microsoft Excel 2003 SP3 and Office 2004 for Mac, where improper handling of in-memory objects during parsing of crafted Excel files enables remote code execution. The vulnerability, dubbed “Record Memory Corruption Vulnerability,” is rated CVSSv2 base 9.3 (Network, single a...

Microsoft Office Excel Remote Code Execution Vulnerability (2640241)

This host is missing an important security update according to Microsoft Bulletin MS11-096. OpenVAS Vulnerability Test $Id: secpodms11-096.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Office Excel Remote Code Execution Vulnerability 2640241 Authors: Antu Sanadi Copyright: Copyright c 2011...

CVE-2011-3403

Microsoft Excel 2003 SP3 and Office 2004 for Mac do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet, aka "Record Memory Corruption Vulnerability."...

Microsoft Office Excel Remote Code Execution Vulnerability (2640241)

This host is missing an important security update according to Microsoft Bulletin MS11-096. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Security Update for Microsoft Office Excel 2003 (KB2596954)

A security vulnerability exists in Microsoft Office Excel 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Excel Record Parsing Code Execution (MS11-096; CVE-2011-3403)

A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to improper handling of certain records in Microsoft Excel while parsing malformed Excel files. A remote attacker could trigger the vulnerability by enticing an affected target user to open a...

MS11-096: Vulnerability in Microsoft Excel Could Allow Remote Code Execution (2640241)

The remote Windows host is running a version of Microsoft Office 2003 that contains a remote code execution vulnerability in Excel. If an attacker can trick a user on the affected host into opening a specially crafted Excel file, he could leverage this issue to execute arbitrary code subject to t...

Microsoft Excel CVE-2011-3403 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability due to a memory-corruption error. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the...

Preemptive Protection against Microsoft Excel Incorrect BIFF2 Record Parsing Code Execution (MS11-072; CVE-2011-1988)

A remote code execution vulnerability has been reported in Microsoft Excel...

Microsoft Office Excel Malformed OBJ Record Handling Overflow(MS11-038)

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS11-038 Microsof...

Microsoft Excel - Malformed OBJ Record Handling Overflow (MS11-038) (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS11-038 Microsof...

MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft Excel Substream Parsing Integer Overflow

Added: 11/08/2011 CVE: CVE-2011-0097 OSVDB: 71758 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem Microsoft Excel 2007 versions lacking the patch KB2464583 detailed in Microsoft Security Advisory...

Microsoft Excel Substream Parsing Integer Overflow

Added: 11/08/2011 CVE: CVE-2011-0097 OSVDB: 71758 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem Microsoft Excel 2007 versions lacking the patch KB2464583 detailed in Microsoft Security Advisory...

Microsoft Excel Substream Parsing Integer Overflow

Added: 11/08/2011 CVE: CVE-2011-0097 OSVDB: 71758 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem Microsoft Excel 2007 versions lacking the patch KB2464583 detailed in Microsoft Security Advisory...