Microsoft Access Database Engine ACEEXCL Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Access Database Engine. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists when...

Microsoft Access Database Engine ACEEXCL Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Access Database Engine. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists when...

CVE-2017-12109

An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerabilit...

Microsoft Office Excel Formula Type Confusion Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

CVE-2017-12111

An exploitable out-of-bounds vulnerability exists in the xlsaddCell function of libxls 1.4. A specially crafted XLS file with a formula record can cause memory corruption resulting in remote code execution. An attacker can send a malicious XLS file to trigger this vulnerability...

November 14, 2017—KB4048961 (Security-only update)

None None...

RZoffice has a divide-by-zero vulnerability

SoftZone Office RZoffice is an office software, which is compatible with MS Office and consists of three parts: word processing, spreadsheet and presentation. RZoffice has a pair of zero-exceptions vulnerability when dealing with special xls files. An attacker can exploit the vulnerability to...

Memory Corruption Vulnerability in WPS Forms (CNVD-2017-34122)

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in formset.exe in WPS when parsing certain xls files, which can be exploited by an attacker to cause a denial of service or code execution...

"Unexpected error from external database driver" error when you create or open Microsoft Excel .xls files

None None...

Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31182)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Forms 2017 can create, modify and edit xls, xlsx files. A memory corruption vulnerability exists in Extreme Forms in Extreme Office when handling special xls files. An...

Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31180)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Forms 2017 can create, modify and edit xls, xlsx files. A memory corruption vulnerability exists in Extreme Forms in Extreme Office when handling special xls files, whi...

Fedora 25 : freexl (2017-b7e6e4cfc1)

This update fixes a Cisco Talos CVE : 'A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.' Note that Tenable Network Security has extracted the preceding description block directly...

AntennaHouse DMC HTMLFilter Txo Code Execution Vulnerability(CVE-2017-2795)

Summary An exploitable heap corruption vulnerability exists in the Txo functionality of AntennaHouse DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigge...

Remote Code Execution (RCE) Through Heap-based Buffer Overflow

freexl is vulnerable to remote code execution RCE Through heap based buffer overflow. The library does not check the content and dimension of the XLS files input to the readbiffnextrecord function, allowing the vulnerability to be triggered when a malicious XLS file is passed to the application...

Remote Code Execution (RCE) Via Heap-based Buffer Overflow Vulnerability

freexl is vulnerable to remote code execution RCE via heap based buffer overflow. The attackers can get full control over the heap overflow since it does not check the content and dimension of the XLS files input to the readlegacybiff function. The vulnerability can be triggered only when malicio...

The Japanese version of the WPS remote code execution vulnerability detailed analysis-vulnerability warning-the black bar safety net

Word processing and work product in the vulnerability is the threat actors to exploit the useful target. Users often encounter in everyday life these software packages use the file type, and may in the email to open such a file, or be prompted to download from the website this file does not produ...

Microsoft Excel Sheet Name Memory Corruption - Ver2 (CVE-2007-3490)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

Microsoft Excel Sheet Name Memory Corruption - Ver2 (CVE-2007-3490)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

Microsoft Excel 95/97/2000/2002/2003/2004 Unspecified Memory Corruption Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/15926/info Microsoft Excel is susceptible to two unspecified memory-corruption vulnerabilities. The issues present themselves when Microsoft Excel tries to process malformed or corrupted XLS files. Attackers may exploit...

Microsoft Excel 95-2004 Malformed Graphic File Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16181/info Microsoft Excel is susceptible to a code-execution vulnerability. The issue presents itself when Excel tries to process malformed or corrupted XLS files. Attackers may exploit this issue to execute arbitrary...