CVE-2006-1302: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain crafted fields in a SELECTION record, which triggers memory corruption, aka "Malformed SELECTION record Vulnerability."...

CVE-2006-1309: Improper Control of Generation of Code

Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted LABEL record that triggers memory corruption...

CVE-2006-1306: Improper Control of Generation of Code

Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka "Malformed OBJECT record Vulnerability."...

CVE-2006-1308: Improper Control of Generation of Code

Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted FNGROUPCOUNT value...

CVE-2006-1301: Improper Control of Generation of Code

Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted SELECTION record that triggers memory corruption, a different vulnerability than CVE-2006-1302...

[Full-disclosure] Microsoft Excel Array Index Error Remote Code Execution

Microsoft Excel Array Index Error Remote Code Execution By Sowhat of Nevis Labs 2006.07.11 http://www.nevisnetworks.com http://secway.org/advisory/AD20060711.txt Vendor Microsoft Inc. Products affected: Microsoft Office 2000 Service Pack 3 Microsoft Office XP Service Pack 3 Microsoft Office 2003...

[Full-disclosure] Microsoft Excel Could Allow Remote Code Execution by Malformed FNGROUPCOUNT value Vulnerability

Microsoft Excel Could Allow Remote Code Execution by Malformed FNGROUPCOUNT value Vulnerability By OYXin xin.ouyang at google mail of Nevis Labs http://www.nevisnetworks.com Vendor Microsoft Inc. Products affected: Microsoft Office 2000 Service Pack 3 Microsoft Office XP Service Pack 3 Microsoft...

ZDI-06-022: Microsoft Office Excel File Rebuilding Code Execution Vulnerability

ZDI-06-022: Microsoft Office Excel File Rebuilding Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-022.html July 11, 2006 -- CVE ID: CVE-2006-2388 -- Affected Vendor: Microsoft -- Affected Products: Office Excel 2003 Office Excel Viewer 2003 Office Excel 2002 Offic...

[VulnWatch] NSFOCUS SA2006-06 : Microsoft Excel COLINFO Record Buffer Overflow Vulnerability

NSFOCUS Security Advisory SA2006-06 Microsoft Excel COLINFO Record Buffer Overflow Vulnerability Release Date: 2006-07-12 CVE ID: CVE-2006-1304 http://www.nsfocus.com/english/homepage/research/0606.htm Affected systems & software =================== Microsoft Excel 2000 Microsoft Excel 2002...

[VulnWatch] NSFOCUS SA2006-05 : Microsoft Excel SELECTION Record Memory Corruption Vulnerability

NSFOCUS Security Advisory SA2006-05 Microsoft Excel SELECTION Record Memory Corruption Vulnerability Release Date: 2006-07-12 CVE ID: CVE-2006-1302 http://www.nsfocus.com/english/homepage/research/0605.htm Affected systems & software =================== Microsoft Excel 2000 Microsoft Excel 2002...

Microsoft Excel Selection Record Variant Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Successfully exploiting this issue allows attackers to corrupt process memory and to execute arbitrary code in the context of targeted users. Note that Microsoft Office applications include functionality to embed Offic...

Update Protection against Microsoft Excel Vulnerabilities (MS06-037)

Microsoft Excel is prone to multiple vulnerabilities that may allow remote attackers to take any action with an affected system. When Excel opens a specially crafted Excel file that results from the processing of a malformed file, it may corrupt system memory, potentially allowing for remote code...

Microsoft Office Excel File Rebuilding Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office. Exploitation requires that the attacker coerce the target into opening a malicious .XLS file. The specific flaw exists within the rebuilding of malformed cell comments. When Excel...

VulnCheck KEV: CVE-2006-3059

Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors. NOTE: this is a different vulnerability than CVE-2006-3086...

Microsoft Excel COLINFO Record Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability because it fails to handle exceptional conditions. Successfully exploiting this issue allows attackers to corrupt process memory and to execute arbitrary code in the context of targeted users. Note that Microsoft Office...

Microsoft Excel OBJECT Record Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability because it fails to handle exceptional conditions. Successfully exploiting this issue allows attackers to corrupt process memory and to execute arbitrary code in the context of targeted users. Note that Microsoft Office...

MS06-037 / MS06-038: Vulnerabilities in Microsoft Excel and Office Could Allow Remote Code Execution (917284 / 917285) (Mac OS X)

The remote host is running a version of Microsoft Office that is affected by various flaws that may allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with Microsoft Excel or another Office application...

MS06-037: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (917285)

The remote host is running a version of Microsoft Excel that could allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it with Microsoft Excel. C Tenable Network Security, Inc. include"compat.inc"; if...

Microsoft Excel FNGROUPCOUNT Record Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Successfully exploiting this issue allows attackers to corrupt process memory and to execute arbitrary code in the context of targeted users. Note that Microsoft Office applications include functionality to embed Offic...

Microsoft Excel File Rebuilding Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Successfully exploiting this issue allows attackers to corrupt process memory and to execute arbitrary code in the context of targeted users. Note that Microsoft Office applications include functionality to embed Offic...