Microsoft Office Excel SupBook Record Linked List Corruption (MS11-021; CVE-2011-0979)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly manage the members of a data structure while parsing a specially crafted Excel...

RSA: SecurID Attack Was Phishing Via an Excel Spreadsheet

RSA confirmed on Friday that the attack that compromised the company’s high-value SecurID product was essentially a small, targeted phishing campaign that included a payload of a malicious Flash object embedded in an Excel file. The much-discussed attack on RSA, which the company revealed last...

CVE-2011-0184

QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via an Excel spreadsheet with a crafted formula that uses unspecified opcodes...

Memory corruption

QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via an Excel spreadsheet with a crafted formula that uses unspecified opcodes...

CVE-2011-0184

QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via an Excel spreadsheet with a crafted formula that uses unspecified opcodes...

iDefense Security Advisory 03.21.11: Apple OfficeImport Framework Excel Memory Corruption Vulnerability

iDefense Security Advisory 03.21.11 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 21, 2011 I. BACKGROUND The OfficeImport framework is an API used by Apple's mobile devices, including the iPod Touch, iPhone, and iPad. The framework is used to parse and display Microsoft Office file...

Adobe Pushes Critical Patch in Flash Player, Reader, Acrobat

Adobe said it is releasing security updates on Monday to address a critical vulnerability in Adobe Flash Player that is being exploited in the wild and could allow a remote attacker to take control of the affected system. The patch is a follow-up to a March 14 Security Advisory from the company...

Google Fixes Flash Bug in Chrome as Researchers Track Targeted Attacks

Google has reacted very quickly to the news this week of a new vulnerability in Adobe Flash and on Tuesday released a new version of Chrome that includes a fix for the Flash bug. Adobe said it plans to have its own fix ready for the flaw next week. The new version of Chrome that Google released h...

Code injection

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll aka AuthPlayLib.bundle in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windo...

CVE-2011-0609

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll aka AuthPlayLib.bundle in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windo...

Adobe Warns of Attacks on Critical Flash Player Bug

Adobe is warning its users about a critical vulnerability in Flash that affects Adobe Reader and Acrobat, as well. The bug can be used by remote attackers to run arbitrary code and Adobe officials said that they’ve already seen some attacks that are targeting the vulnerability. The vulnerability ...

New Adobe Under Zero-Day Attack !

Adobe today released an advisory to warn about a remote code execution vulnerability in Flash Player, which also affects Adobe Reader and Acrobat. This critical vulnerability has been assigned CVE-2011-0609. Currently seen attacks work through a malicious SWF file which is embedded inside an Exce...

Adobe Flash Player SWF Embedded in Excel File Code Execution (APSA11-01; CVE-2011-0609)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the Adobe Flash Player when parsing SWF files embedded in Excel files. A...

Microsoft Excel Crafted URL Unicode Buffer Overflow (MS06-050; CVE-2006-3086; CVE-2011-0104)

Microsoft Excel is a popular spreadsheet application. The application can create complex spreadsheets with multiple workbooks, formulas, and various data sources. The common extension used for Microsoft Excel documents is .xls. A buffer overflow vulnerability has been reported in Microsoft Excel...

Microsoft Excel 2007 Office Drawing Layer Remote Code Execution Vulnerability

This host is installed with Microsoft Office Excel and is prone to remote code execution vulnerability. This NVT has been replaced by NVT secpodms11-023.nasl OID:1.3.6.1.4.1.25623.1.0.902364. OpenVAS Vulnerability Test $Id: gbmsofficeexceldrawinglayercodeexecvuln.nasl 6538 2017-07-05 11:38:27Z...

Microsoft Office Excel 2003 Invalid Object Type Remote Code Execution Vulnerability

This host is installed with Microsoft Office Excel and is prone to multiple remote code execution vulnerability. This NVT has been replaced by NVT secpodms11-021.nasl OID:1.3.6.1.4.1.25623.1.0.902410. OpenVAS Vulnerability Test $Id: gbmsofficeexcelartobjectcodeexecvuln.nasl 6538 2017-07-05...

Microsoft Office Excel Axis and Art Object Parsing Remote Code Execution Vulnerabilities

This host is installed with Microsoft Office Excel and is prone to multiple remote code execution vulnerabilities. This NVT has been replaced by NVT secpodms11-021.nasl OID:1.3.6.1.4.1.25623.1.0.902410. OpenVAS Vulnerability Test $Id: gbmsofficeexcelmultcodeexecvuln.nasl 6538 2017-07-05 11:38:27Z...

Microsoft Office Excel 2003 Invalid Object Type RCE Vulnerability

Microsoft Office Excel is prone to multiple remote code execution RCE vulnerabilities. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.902410. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...

Microsoft Office Excel Axis and Art Object Parsing RCE Vulnerabilities

Microsoft Office Excel is prone to multiple remote code execution RCE vulnerabilities. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.902410. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...

Microsoft Excel 2007 Office Drawing Layer RCE Vulnerability

Microsoft Office Excel is prone to a remote code execution RCE vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.902364. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...