Microsoft Excel Calendar Object Validation Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Excel BIFF File Format Parsing Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Office Excel REPT Formula Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page, or open a malicious file. The specific flaw exists when parsing Microsof...

Microsoft Excel FRTWrapper Record Buffer Overflow (MS08-057; CVE-2008-3471)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the way Microsoft Excel processes objects when loading Excel files into memory. The vulnerability is due to an error in Microsoft Excel that fails to perform sufficient validation wh...

Microsoft Excel Formula Parsing Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

CVE-2008-4211

Integer signedness error in 1 QuickLook in Apple Mac OS X 10.5.5 and 2 Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted Microsoft Exce...

Integer overflow

Integer signedness error in 1 QuickLook in Apple Mac OS X 10.5.5 and 2 Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted Microsoft Exce...

CVE-2008-4211

CVE-2008-4211 describes a signedness error in QuickLook on Mac OS X 10.5.5 and in Office Viewer for iPhone OS 1.0–2.1 that allows remote attackers to trigger an out-of-bounds memory access via a crafted Excel file (relating to “handling of columns”), potentially causing denial of service and arbi...

CVE-2008-4211

Integer signedness error in 1 QuickLook in Apple Mac OS X 10.5.5 and 2 Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted Microsoft Exce...

VulnCheck KEV: CVE-2008-0081

Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka "Macro Validation Vulnerability," a different vulnerability than CVE-2007-3490...

Microsoft Excel FORMAT record array index memory corruption

Added: 09/24/2008 CVE: CVE-2008-3005 BID: 30639 OSVDB: 47408 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability allows command execution when a user opens a spreadsheet...

Microsoft Excel FORMAT record array index memory corruption

Added: 09/24/2008 CVE: CVE-2008-3005 BID: 30639 OSVDB: 47408 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability allows command execution when a user opens a spreadsheet...

Microsoft Excel FORMAT record array index memory corruption

Added: 09/24/2008 CVE: CVE-2008-3005 BID: 30639 OSVDB: 47408 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability allows command execution when a user opens a spreadsheet...

Microsoft Excel FORMAT record array index memory corruption

Added: 09/24/2008 CVE: CVE-2008-3005 BID: 30639 OSVDB: 47408 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability allows command execution when a user opens a spreadsheet...

Microsoft GDI+ VML Heap-Based Buffer Overflow Vulnerability

Description Microsoft GDI+ is prone to a heap-based buffer-overflow vulnerability because the vector graphics link library improperly processes gradient sizes. Successfully exploiting this issue would allow an attacker to corrupt heap memory and execute arbitrary code in the context of the...

Microsoft GDI+ GIF File Parsing Remote Code Execution Vulnerability

Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly parses GIF image files. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may...

Microsoft GDI+ WMF Image File Buffer Overflow Vulnerability

Description Microsoft GDI+ is prone to a buffer-overflow vulnerability because the vector graphics linked library improperly allocates memory when parsing WMF image files. Successfully exploiting this issue would allow an attacker to corrupt memory and execute arbitrary code in the context of the...

Microsoft Excel Could Allow Remote Code Execution Vulnerabilities (954066)

This host is missing critical security update according to Microsoft Bulletin MS08-043. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Excel凭据缓存漏洞（MS08-043）

BUGTRAQ ID: 30641 CVECAN ID: CVE-2008-3003 Excel是Microsoft Office办公软件套件中的电子表格工具。 Excel在实现访问认证时存在漏洞，如果.xlsx文件配置为不保存远程数据会话口令的话，Excel就无法正确地从connections.xml删除PWD字符串，这允许用户获得敏感信息并获得对远程数据源的访问。 Microsoft Excel 2007 SP1 Microsoft Excel 2007 Microsoft Office 2008 for Mac 临时解决方法： 在.xlsx文件内编辑connections...

Microsoft Excel索引验证远程代码执行漏洞（MS08-043）

BUGTRAQ ID: 30638 CVECAN ID: CVE-2008-3004 Excel是Microsoft Office办公软件套件中的电子表格工具。 Excel在将Excel文件加载到内存时没有正确地验证电子表格内嵌图表中的AxesSet记录，如果XLS文件中包含有越界的数组值的话，则用户受骗打开了该文件的话就可能触发内存破坏，导致执行任意指令。 Microsoft Excel Viewer 2003 Microsoft Excel 2003 SP3 Microsoft Excel 2003 SP2 Microsoft Excel 2002 SP3 Microsoft Exc...