CVE-2011-1277: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2002 SP3, Office 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted...

CVE-2011-1278: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted spreadsheet, aka "Excel WriteAV Vulnerability."...

CVE-2011-1275: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2002 SP3; Office 2004, 2008, and 2011 for Mac; and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a...

CVE-2011-0097

Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary cod...

CVE-2011-0101: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted RealTimeData record, related to a stTopic field, double-byte characters, and an incorrect pointer calculation, aka "Excel Record Parsing WriteAV Vulnerability."...

CVE-2011-0103: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted record information in an Excel file, aka "Excel Memory Corruption...

PT-2011-2088

Name of the Vulnerable Software and Affected Versions Microsoft Excel version 2002 SP3 Description A remote code execution issue exists in the way Microsoft Excel handles specially crafted Excel files, potentially allowing an attacker to take complete control of an affected system. This could...

CVE-2011-0980: Undefined Security Weakness

Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office Art objects, which allows remote attackers to execute arbitrary code via vectors related to a function pointer, aka "Excel Dangling Pointer Vulnerability."...

PT-2010-4666

Name of the Vulnerable Software and Affected Versions Microsoft Excel 2002 SP3 Description A remote code execution issue exists in the way Microsoft Excel handles specially crafted Excel files, potentially allowing attackers to execute arbitrary code. This could enable an attacker to take complet...

CVE-2010-3231: Improper Input Validation

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel Record Parsing Memory Corruption Vulnerability."...

CVE-2010-3238: Improper Input Validation

Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Negative Future Function Vulnerability."...

CVE-2010-3234: Improper Input Validation

Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Substream Memory Corruption Vulnerability."...

CVE-2010-3241: Improper Input Validation

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Out-of-Bounds Memory Write in Parsing Vulnerabilit...

CVE-2010-3230: Undefined Security Weakness

Integer overflow in Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel document with crafted record information, aka "Excel Record Parsing Integer Overflow Vulnerability."...

CVE-2010-3240: Improper Input Validation

Microsoft Excel 2002 SP3 and 2007 SP2; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Real Time Data Array...

CVE-2010-3239: Improper Input Validation

Microsoft Excel 2002 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Extra Out of Boundary Record Parsing Vulnerability."...

CVE-2010-3242: Improper Input Validation

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Ghost Record Type Parsing Vulnerability."...

CVE-2010-3235: Improper Input Validation

Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Biff Record Vulnerability."...

PT-2010-4670

Name of the Vulnerable Software and Affected Versions Microsoft Excel version 2002 SP3 Description A remote code execution issue exists due to improper validation of formula information in Microsoft Excel, allowing attackers to execute arbitrary code via a crafted Excel document. This vulnerabili...

CVE-2010-3237: Improper Input Validation

Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Merge Cell Record Pointer Vulnerability."...