Microsoft Excel MDXSET Record Remote Heap Buffer Overflow Vulnerability

Description Microsoft Excel is prone to a remote heap-based buffer-overflow vulnerability. Attackers can exploit this issue by enticing victims into opening a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user...

Microsoft Excel FNGROUPNAME Record Uninitialized Memory (MS10-017; CVE-2010-0262)

Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this flaw ...

Microsoft Excel DbOrParamQry Record Parsing Code Execution (MS10-017; CVE-2010-0264)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...

Microsoft Excel Sheet Object Type Confusion (MS10-017; CVE-2010-0258)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...

Microsoft Excel XLSX File Parsing Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing victims to open a specially crafted 'XLXS' Excel file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Excel FNGROUPNAME Record Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing victims into opening a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Excel MDXTUPLE and MDXSET Records Heap Overflow (MS10-017; CVE-2010-0260; CVE-2010-0261)

Microsoft Excel is a popular spreadsheet application. Multiple heap overflow vulnerabilities have been identified in Microsoft Excel. These vulnerabilities are due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger...

Microsoft Excel XLSX File Parsing Code Execution (MS10-017; CVE-2010-0263)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...

Microsoft Excel EntExU2 Record Memory Corruption (MS10-017; CVE-2010-0257)

Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this flaw ...

Microsoft Excel MDXTUPLE Record Remote Heap Buffer Overflow Vulnerability

Description Microsoft Excel is prone to a remote heap-based buffer-overflow vulnerability. Attackers can exploit this issue by enticing victims into opening a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user...

Microsoft Excel EntExU2 Record Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing victims to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Excel Object Type Confusion Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing victims into opening a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Excel Malformed Graphic Code Execution (MS06-012; CVE-2006-0030)

Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available in several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...

Microsoft Excel Malformed OBJECT Record Code Execution (MS06-037; CVE-2006-1306)

There exists an arbitrary index pointer code execution vulnerability in Microsoft Excel. The flaw is caused by an insufficient check of a malformed OBJECT Record in an Excel file. An attacker can exploit this vulnerability to inject and execute arbitrary code in the security context of the...

Microsoft Excel File Named Graph Record Parsing Stack Overflow (MS07-023; CVE-2007-0215)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

Microsoft Excel Malformed FEATHEADER Record Vulnerability

$Id: ms09067excelfeatheader.rb 8474 2010-02-13 06:57:58Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Excel Set Font Handling Code Execution (MS07-023; CVE-2007-1203)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

MS09-067 Microsoft Excel Malformed FEATHEADER Record Vulnerability

This module exploits a vulnerability in the handling of the FEATHEADER record by Microsoft Excel. Revisions of Office XP and later prior to the release of the MS09-067 bulletin are vulnerable. When processing a FEATHEADER Shared Feature record, Microsoft used a data structure from the file to...

Microsoft Excel rtWindow1 Record Handling Code Execution (CVE-2007-3029)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formula, and various data sources. The common extension used for Microsoft Excel documents is .xls or .xlw....

Microsoft Office Excel Document Parsing Memory Corruption (MS09-067; CVE-2009-3133)

Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target...