Microsoft Excel释放后重用远程代码执行漏洞

BUGTRAQ ID: 50533 Microsoft Excel是微软公司的办公软件Microsoft office的组件之一，是由Microsoft为Windows和Apple Macintosh操作系统的电脑而编写和运行的一款试算表软件。Excel 是微软办公套装软件的一个重要的组成部分，它可以进行各种数据的处理、统计分析和辅助决策操作，广泛地应用于管理、统计财经、金融等众多领域。 Microsoft Excel在处理vbscript宏的代码时存在释放后重用漏洞，远程攻击者可利用此漏洞执行任意代码。 Microsoft Excel 2003 SP3 厂商补丁： Microsoft...

MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow

$Id: ms11021xlbbof.rb 14172 2011-11-06 20:16:34Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Microsoft Excel 2007 - '.xlb' Local Buffer Overflow (MS11-021) (Metasploit)

$Id: ms11021xlbbof.rb 14172 2011-11-06 20:16:34Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Microsoft Excel 2003 11.8335.8333 - Use-After-Free

Microsoft Excel 2003 11.8335.8333 - Use-After-Free Luigi Auriemma Application: Microsoft Excel http://office.microsoft.com/en-us/excel/ http://office.microsoft.com/en-us/downloads/CD001022531.aspx Versions: tested Office 2003 11.8335.8333 SP3 Platforms: Windows Bug: use after free Exploitation:...

MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow

Exploit for windows platform in category local exploits $Id: ms11021xlbbof.rb 14172 2011-11-06 20:16:34Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Microsoft Excel 2003 11.8335.8333 - Use-After-Free

Luigi Auriemma Application: Microsoft Excel http://office.microsoft.com/en-us/excel/ http://office.microsoft.com/en-us/downloads/CD001022531.aspx Versions: tested Office 2003 11.8335.8333 SP3 Platforms: Windows Bug: use after free Exploitation: file Date: 03 Nov 2011 found 24 Aug 2011 Author: Lui...

Microsoft Excel 2007 SP2 Buffer Overwrite Exploit

No description provided by source. Abysssec Research 1 Advisory information Title : Microsoft Excel 2007 SP2 Buffer Overwrite Vulnerability Analysis : Abysssec.com Vendor : http://www.microsoft.com Impact : Critical Contact : info at abysssec.com Twitter : @abysssec Microsoft : A remote code...

Microsoft Excel 2007 SP2 - Buffer Overwrite (MS11-021)

Abysssec Research 1 Advisory information Title : Microsoft Excel 2007 SP2 Buffer Overwrite Vulnerability Analysis : Abysssec.com Vendor : http://www.microsoft.com Impact : Critical Contact : info at abysssec.com Twitter : @abysssec Microsoft : A remote code execution vulnerability exists in the w...

Microsoft Excel 2007 SP2 - Buffer Overwrite (MS11-021)

Microsoft Excel 2007 SP2 - Buffer Overwrite MS11-021 Abysssec Research 1 Advisory information Title : Microsoft Excel 2007 SP2 Buffer Overwrite Vulnerability Analysis : Abysssec.com Vendor : http://www.microsoft.com Impact : Critical Contact : info at abysssec.com Twitter : @abysssec Microsoft : ...

APPLE-SA-2011-10-12-6 Numbers for iOS v1.5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-6 Numbers for iOS v1.5 Numbers for iOS v1.5 is now available and addresses the following: Numbers Available for: iOS Impact: Opening a maliciously crafted Excel file may lead to an unexpected application termination or arbitrary co...

CVE-2011-3261

Double free vulnerability in OfficeImport in Apple iOS before 5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Excel spreadsheet...

Double free

Double free vulnerability in OfficeImport in Apple iOS before 5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Excel spreadsheet...

CVE-2011-3261

Double free vulnerability in OfficeImport in Apple iOS before 5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Excel spreadsheet...

CVE-2011-3261

CVE-2011-3261 is a double-free vulnerability in OfficeImport on Apple iOS, affecting OfficeImport’s handling of Excel files and leading to arbitrary code execution or a denial of service (app crash) when processing crafted Excel spreadsheets. The issue is rooted in a memory-management error (doub...

Microsoft Office Excel Conditional Expression Ptg Type Confusion Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

Microsoft Office Graph DataFormat Signed Index Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office 2007. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Fedora 16 : phpMyAdmin-3.4.5-1.fc16 (2011-12905)

Changes for 3.4.5.0 2011-09-14 : - interface Page list in navigation frame looks odd - interface Error div misplaced - interface Comment on a column breaks inline editing - display Order by a column in a view doesn't work in some cases - interface Add missing space to server status - core Remove...

Microsoft Office multiple security vulnerabilities

Multiple Excel memory corruptions, Word uninitialized pointer dereference, unsafe DLL loading...

VUPEN Security Research - Microsoft Office Excel Formula Record Heap Corruption Vulnerability

VUPEN Security Research - Microsoft Office Excel Formula Record Heap Corruption Vulnerability Website : http://www.vupen.com/english/research.php Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- "Microsoft Office Excel is a powerful tool you can use to create and format...

iDefense Security Advisory 09.13.11: Microsoft Excel Record Integer Signedness Vulnerability

iDefense Security Advisory 09.13.11 http://labs.idefense.com/intelligence/vulnerabilities/ Sep 13, 2011 I. BACKGROUND Excel is the spreadsheet application included with Microsoft Corp.'s Office productivity software suite. More information is available at the following website:...