Microsoft Excel Malformed Palette Record Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected application, which can result in the compromise of affected computers. Technologies Affected Microsoft...

CVE-2006-5994

Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v. X for Mac, and Works 2004, 2005, and 2006 allows remote attackers to execute arbitrary code via a Word document with a malformed string that triggers memory corruption, a different...

CVE-2006-5994

Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v. X for Mac, and Works 2004, 2005, and 2006 allows remote attackers to execute arbitrary code via a Word document with a malformed string that triggers memory corruption, a different...

Microsoft Office Excel畸形文件格式解析远程代码执行漏洞（MS06-012）

Microsoft Office Excel是非常流行的电子表格办公软件。 Microsoft Office Excel在处理Excel文档中畸形解析格式时存在漏洞，攻击者可能利用此漏洞在客户机器上执行任意代码。 使用畸形解析格式文件的Excel中存在一个远程执行代码漏洞。攻击者可以通过构建特制的Excel文件来利用此漏洞，可能允许远程执行代码。 Microsoft Office XP SP3 Microsoft Office X for Mac Microsoft Office 2004 for Mac Microsoft Office 2003 Service Pack 2...

Microsoft Office Excel畸形记录远程代码执行漏洞（MS06-012）

Microsoft Office Excel是非常流行的电子表格办公软件。 Microsoft Office Excel在处理畸形Excel文档时存在漏洞，攻击者可能利用此漏洞在用户机器上执行任意代码。 使用畸形记录的Excel中存在一个远程执行代码漏洞。攻击者可以通过构建特制的Excel文件来利用此漏洞，可能允许远程执行代码。 Excel在打开“.xls”文件时会以0x0e0e0e0e初始化栈缓冲区，但使用的用户提供长度会导致栈溢出。以下代码源于excel v9.0.0.8924： .text:3003FE0C movzx eax, word ptr ebx .text:3003FE0...

Microsoft Office畸形传送名单远程代码执行漏洞（MS06-012）

Microsoft Office是非常流行的办公软件。 Microsoft Office在处理Office文档时存在漏洞，成功利用此漏洞的攻击者可以完全控制受影响的系统。 攻击者可以通过在Office文档内构建特制的传送名单来利用此漏洞，可能允许远程执行代码。 Microsoft Office XP SP3 Microsoft Office X for Mac Microsoft Office 2004 for Mac Microsoft Office 2003 Service Pack 2 Microsoft Office 2003 Service Pack 1 Microsoft...

Microsoft Office Excel畸形公式大小栈溢出漏洞（MS06-012）

Microsoft Office Excel是非常流行的电子表格办公软件。 Microsoft Office Excel在处理Excel文档中的畸形描述时存在漏洞，攻击者可能利用此漏洞在客户机器上执行任意代码。 Microsoft Excel对opcode 0x0218的管理存在栈溢出漏洞。如果提供了特别大的公式大小，攻击者就可以触发此漏洞，可能允许远程执行代码。 Microsoft Office XP SP3 Microsoft Office X for Mac Microsoft Office 2004 for Mac Microsoft Office 2003 Service Pa...

Microsoft Excel畸形命名区域内存破坏漏洞（MS06-012）

Microsoft Excel是Office产品套件中的电子表格和分析程序。 Microsoft Excel中存在安全漏洞，攻击者可能利用此漏洞在机器上执行指令。 如果能够通过Excel .xls文件的数据字段向"msvcrt.memmove"传送很大的值的话，就可能导致内存破坏，执行任意代码。 Microsoft Office XP SP3 Microsoft Office X for Mac Microsoft Office 2004 for Mac Microsoft Office 2003 Service Pack 2 Microsoft Office 2003 Service...

CVE-2006-5404

CVE-2006-5404 involves an unspecified vulnerability in an ActiveX control used by the Symantec Automated Support Assistant, deployed in Norton AntiVirus, Internet Security, and System Works 2005/2006. The vulnerability allows user‑assisted remote attackers to obtain sensitive information via unsp...

ZDI-06-033: Microsoft Office Excel File Format DATETIME Record Parsing Vulnerability

ZDI-06-033: Microsoft Office Excel File Format DATETIME Record Parsing Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-033.html October 10, 2006 -- CVE ID: CVE-2006-2387 -- Affected Vendor: Microsoft -- Affected Products: Microsoft Office 2000 SP3 Microsoft Office XP SP3 Microsof...

Microsoft Security Bulletin MS06-059 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (924164)

Microsoft Security Bulletin MS06-059 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution 924164 Published: October 10, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Excel Impact of Vulnerability: Remote Code Execution Maximum Severity Rating...

CVE-2006-2387

Microsoft Excel contains a remote-code-execution vulnerability CVE-2006-2387 in the parsing of a malformed DATETIME record within XLS files. Affected products include Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004–2006. The root cause is insuf...

Microsoft Word Malformed String Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to load a malicious Word file. If the vulnerability is successfully exploited, this could result in the execution of arbitrary code in the context of the current...

CVE-2006-3649

Buffer overflow in Microsoft Visual Basic for Applications VBA SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, Project 2000 SR1, Project 2002 SP1, Access 2000 Runtime SP3, Visio 2002 SP2, and Works Suite 2004 through 2006, allows user-assisted attackers to execute...

Microsoft Security Bulletin MS06-047 Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution (921645)

Microsoft Security Bulletin MS06-047 Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution 921645 Published: August 8, 2006 Version: 1.0 Summary Who Should Read this Document: Customers using Microsoft Office applications or applications that use Microsoft...

VulnCheck KEV: CVE-2006-3649

Buffer overflow in Microsoft Visual Basic for Applications VBA SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, Project 2000 SR1, Project 2002 SP1, Access 2000 Runtime SP3, Visio 2002 SP2, and Works Suite 2004 through 2006, allows user-assisted attackers to execute...

CVE-2006-3654

Buffer overflow in wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service CPU consumption or crash via crafted Excel files...

CVE-2006-3653

wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service CPU consumption or crash via crafted 1 Works, 2 Excel, and 3 Lotus 1-2-3 files...

CVE-2006-3654

Buffer overflow in wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service CPU consumption or crash via crafted Excel files...

CVE-2006-3654

The CVE-2006-3654 entry affects Microsoft Works Spreadsheet 8.0 (wksss.exe 8.4.702.0). The underlying issue is a buffer overflow triggered by crafted Excel files, enabling remote attackers to cause a denial of service (CPU consumption or crash). No patch/fix details are provided in the connected ...