MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Microsoft Office Excel Index Parsing Pointer Corruption Code Execution - Ver2 (CVE-2009-3132)

A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitra...

Microsoft Excel WOpt Record Memory Corruption - Ver2 (CVE-2010-0824)

A memory corruption inclusion vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. Successful exploitation of this vulnerability could allow a remote attacker to...

Microsoft Excel RealTime Date Record Parsing Buffer Overflow - Ver2 (CVE-2011-0101)

A buffer overflow vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to a memory handling error in Microsoft Office Excel during validation of record information while parsing a specially crafted Excel file. A remote attacker could exploit this vulnerability by...

Microsoft Excel Embedded Object Validation Integer Overflow - Ver2 (CVE-2008-3477)

An integer overflow vulnerability has been reported inMicrosoft Office Excel. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Office Excel Record Parsing Use After Free (MS11-072) - Ver2 (CVE-2011-1986)

A remote code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to lack of validation of certain record structures while handling specially crafted Excel files. A remote attacker could trigger this vulnerability by enticing an unsuspecting user to open ...

Microsoft Office Excel Featheader Record Memory Corruption (MS09-067) - Ver2 (CVE-2009-3129)

Microsoft Excel is a popular spreadsheet application. . A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...

Microsoft Office Excel Remote Code Execution Vulnerabilities (2885080)

This host is missing an important security update according to Microsoft Bulletin MS13-085. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Excel Viewer Remote Code Execution Vulnerabilities (2858300)

This host is missing an important security update according to Microsoft Bulletin MS13-073. OpenVAS Vulnerability Test $Id: secpodmsexcelviewerms13-073.nasl 6115 2017-05-12 09:03:25Z teissa $ Microsoft Office Excel Viewer Remote Code Execution Vulnerabilities 2858300 Authors: Antu Sanadi Copyrigh...

Microsoft Office Excel Viewer Remote Code Execution Vulnerabilities (2858300)

This host is missing an important security update according to Microsoft Bulletin MS13-073. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2013-72: XML External Entities Resolution vulnerability in Microsoft Office Excel

The specialists of the Positive Research center have detected an XML External Entities Resolution vulnerability in Microsoft Office Excel. The vulnerability is possible due to unsafe parsing of XML external entities. If an attacker makes a victim open a specially crafted XML document, Microsoft...

Microsoft Excel 2007 - WriteAV Crash (PoC)

Title : Microsoft Office Excel 2007 WriteAV Vulnerability Version : Microsoft Office professional Plus 2007 SP2 Date : 2012-11-08 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ---- memory corruption duri...

Microsoft Office Excel 2007 WriteAV Vulnerability

memory corruption during the handling of the xls files a context-dependent attacker can execute arbitrary code. Title : Microsoft Office Excel 2007 WriteAV Vulnerability Version : Microsoft Office professional Plus 2007 SP2 Date : 2012-11-08 Vendor : http://office.microsoft.com Impact : Med/High...

Microsoft Excel 2010 - Crash (PoC) (1)

Title : Microsoft Office Excel 2010 memory corruption Version : Microsoft Office professional Plus 2010 Date : 2012-10-27 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ---- memory corruption during the...

Microsoft Office Excel 2010 memory corruption

memory corruption during the handling of the xls files a context-dependent attacker can execute arbitrary code. Title : Microsoft Office Excel 2010 memory corruption Version : Microsoft Office professional Plus 2010 Date : 2012-10-27 Vendor : http://office.microsoft.com Impact : Med/High Contact ...

Microsoft Office Excel Record Parsing Use After Free (MS11-072; CVE-2011-1986)

A remote code execution vulnerability has been reported in Microsoft Office Excel...

Microsoft Office Excel ReadAV Arbitrary Code Execution

Exploit for windows platform in category local exploits !/usr/bin/perl Microsoft Office Excel ReadAV Arbitrary Code Execution Author: Jean Pascal Pereira Vendor URI: http://office.microsoft.com Vendor Description: Microsoft Excel is a commercial spreadsheet application written and distributed by...

XSS vulnerability in Office Connector plugin

From: OFFCONN-81: Using "office excel"-macro as part of viewfile, which is part of office connector plugin seems to open up the possibility to get injected with XSS-code. Steps to reproduce: 1. Create an excel-file with following content in one cell: code '"alert'XSS' code 2. Attach this file to ...

XSS vulnerability in Office Connector plugin

From: OFFCONN-81: Using "office excel"-macro as part of viewfile, which is part of office connector plugin seems to open up the possibility to get injected with XSS-code. Steps to reproduce: 1. Create an excel-file with following content in one cell: code '"alert'XSS' code 2. Attach this file to ...

XSS vulnerability in Office Connector plugin

From: OFFCONN-81: Using "office excel"-macro as part of viewfile, which is part of office connector plugin seems to open up the possibility to get injected with XSS-code. Steps to reproduce: 1. Create an excel-file with following content in one cell: code '"alert'XSS' code 2. Attach this file to ...