CVE-2012-1887

Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SST Invalid Length Use After Free Vulnerability."...

CVE-2012-1886

Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted spreadsheet, aka "Excel Memory Corruption Vulnerability."...

MS12-076: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2720184) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Excel that is affected by the following vulnerabilities : - A heap-based buffer overflow vulnerability exists due to the way the application handles memory when opening Excel files. CVE-2012-1885 - A memory corruption vulnerability exists...

CVE-2012-1887

CVE-2012-1887 is a use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2/SP3, 2010 SP1, and Office for Mac 2008/2011, exploitable via a crafted spreadsheet to achieve remote code execution. The underlying issue is a use-after-free in handling an Excel SST Invalid Length condition. Af...

CVE-2012-1885

Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SerAuxErrBar Heap Overflow Vulnerability."...

Microsoft Excel SST Invalid Length Use After Free (MS12-076; CVE-2012-1887)

A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to an error in Microsoft Excel while handling specially crafted Excel files. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted Excel file. Successful...

Microsoft Excel SerAuxErrBar Heap Overflow (MS12-076; CVE-2012-1885)

A remote code execution vulnerability has been reported in Microsoft Excel...

Microsoft Excel Modified Data Structure Stack Overflow (MS12-076; CVE-2012-2543)

A remote code execution vulnerability has been reported in Microsoft Excel...

Microsoft Excel 'SerAuxErrBar' Heap Overflow Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running...

Microsoft Excel Malformed File Memory Corruption (MS12-076; CVE-2012-1886)

A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to an error in Microsoft Excel while handling specially crafted Excel files. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted Excel file. Successful...

Microsoft Excel SST Invalid Length Use After Free Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running...

Microsoft Excel CVE-2012-2543 Buffer Overflow Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running...

MS12-076: Vulnerabilities in Microsoft Excel could allow remote code execution: November 13, 2012

Fixes the vulnerabilities in Microsoft Excel that could allow remote code execution, that was released on November 13, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-076. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

Microsoft Excel CVE-2012-1886 Memory Corruption Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running...

Microsoft Excel 2007 - WriteAV Crash (PoC)

Microsoft Excel 2007 - WriteAV Crash PoC Title : Microsoft Office Excel 2007 WriteAV Vulnerability Version : Microsoft Office professional Plus 2007 SP2 Date : 2012-11-08 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP...

Microsoft Excel 2010 - Crash (PoC) (1)

Microsoft Excel 2010 - Crash PoC 1 Title : Microsoft Office Excel 2010 memory corruption Version : Microsoft Office professional Plus 2010 Date : 2012-10-27 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug :...

CVE-2012-5672

Microsoft Excel Viewer aka Xlview.exe and Excel in Microsoft Office 2007 aka Office 12 allow remote attackers to cause a denial of service read access violation and application crash via a crafted spreadsheet file, as demonstrated by a .xls file with battery voltage data...

Design/Logic Flaw

Microsoft Excel Viewer aka Xlview.exe and Excel in Microsoft Office 2007 aka Office 12 allow remote attackers to cause a denial of service read access violation and application crash via a crafted spreadsheet file, as demonstrated by a .xls file with battery voltage data...

CVE-2012-5672

CVE-2012-5672 affects Microsoft Excel Viewer (Xlview.exe) and Excel in Office 2007. A crafted .xls spreadsheet can trigger a read access violation, causing an application crash (denial of service). The description and connected sources consistently describe the issue as a DoS via a malformed Exce...

CVE-2012-5672

Microsoft Excel Viewer aka Xlview.exe and Excel in Microsoft Office 2007 aka Office 12 allow remote attackers to cause a denial of service read access violation and application crash via a crafted spreadsheet file, as demonstrated by a .xls file with battery voltage data...