CVE-2009-3130

Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via a spreadsheet containing a malformed Binary File Format aka BIFF record that triggers memory corruption, ak...

Microsoft Excel畸形BIFF记录远程代码执行漏洞(MS09-067)

Bugraq ID: 36946 CVE ID：CVE-2009-3130 Microsoft Excel是一款微软开发的电子表格处理程序。 Microsoft Office Excel存在一个远程代码执行漏洞，如果用户打开一个特殊构建的包含畸形的BIFF记录的Excel文件可允许远程代码执行。 成功利用此漏洞允许完全控制受影响系统，攻击者成功利用此漏洞可以以内核权限安装程序；查看，更改或删除数据等。 Microsoft Open XML File Format Converter for Mac Microsoft Office 2008 for Mac Microsoft Offic...

Microsoft Excel Document Malformed BIFF Record Heap Overflow (MS09-067; CVE-2009-3130)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...

Microsoft Excel Malformed BIFF Record Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing victims into opening a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Excel BIFF format Qsir record memory corruption

Added: 09/11/2009 CVE: CVE-2009-1134 BID: 35246 OSVDB: 54958 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability allows command execution when a user closes a spreadshee...

Microsoft Excel BIFF format Qsir record memory corruption

Added: 09/11/2009 CVE: CVE-2009-1134 BID: 35246 OSVDB: 54958 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability allows command execution when a user closes a spreadshee...

Microsoft Excel BIFF format Qsir record memory corruption

Added: 09/11/2009 CVE: CVE-2009-1134 BID: 35246 OSVDB: 54958 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability allows command execution when a user closes a spreadshee...

Memory corruption

Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a BIFF file with a malformed Qsir 0x806 record object, aka...

CVE-2009-1134

Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a BIFF file with a malformed Qsir 0x806 record object, aka...

CVE-2009-1134

CVE-2009-1134 is a memory corruption/remote code execution vulnerability in Microsoft Excel and related components (Excel 2007 SP1/SP2, Excel Viewer, and Office Compatibility Pack SP1/SP2). The flaw occurs while parsing BIFF records, specifically a malformed Qsir (0x806) record, leading to code e...

Microsoft Office Excel QSIR Record Pointer Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. Exploitation requires user interaction in that a victim must open a malicious XLS file. The specific flaw exists within the parsing of the BIFF file format used by Microsoft...

Microsoft Excel BIFF文件格式解析栈溢出漏洞（MS08-057）

BUGTRAQ ID: 31705 CVECAN ID: CVE-2008-3471 Excel是微软Office办公套件中的电子表格工具。 Excel在解析BIFF文件格式时使用文件中记录的内容计算拷贝用户提供数据的栈缓冲区的大小，如果远程攻击者在记录中设置了特制的记录值的话，就可能触发栈溢出，导致执行任意指令。 Microsoft Excel Viewer 2003 SP3 Microsoft Excel Viewer 2003 Microsoft Excel Viewer Microsoft Excel 2007 SP1 Microsoft Excel 2007 Microsoft...

[Full-disclosure] ZDI-08-068: Microsoft Office Excel BIFF File Format Parsing Stack Overflow Vulnerability

ZDI-08-068: Microsoft Office Excel BIFF File Format Parsing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-068 -- CVE ID: CVE-2008-3471 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office Excel -- TippingPointTM IPS Customer Protection:...

Microsoft Excel FRTWrapper Record Buffer Overflow (MS08-057; CVE-2008-3471)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the way Microsoft Excel processes objects when loading Excel files into memory. The vulnerability is due to an error in Microsoft Excel that fails to perform sufficient validation wh...

Microsoft Excel BIFF File Format Parsing Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Office Excel BIFF File Format Parsing Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. Exploitation requires that the victim to open the malformed BIFF .xls document. The specific flaw exists within the parsing of the BIFF file format used by Microsoft Excel...

Microsoft Excel COUNTRY记录内存破坏漏洞（MS08-043）

BUGTRAQ ID: 30640 CVECAN ID: CVE-2008-3006 Excel是Microsoft Office办公软件套件中的电子表格工具。 Excel没有正确地处理BIFF文件格式，在处理文件中的畸形Country（0x8c）记录时可能会触发内存破坏，导致以当前登录用户的权限执行任意指令。 Microsoft Excel Viewer 2003 SP3 Microsoft Excel Viewer 2003 Microsoft Excel Viewer Microsoft Excel 2007 SP1 Microsoft Excel 2007 Microsoft...

ZDI-08-048: Microsoft Excel COUNTRY Record Memory Corruption Vulnerability

ZDI-08-048: Microsoft Excel COUNTRY Record Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-048 August 12, 2008 -- CVE ID: CVE-2008-3006 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office Excel -- TippingPointTM IPS Customer Protection:...

Microsoft Excel COUNTRY Record Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. Exploitation requires that the attacker coerce the target into opening a malicious .XLS file. The specific flaw exists within the parsing of the BIFF file format used by...

Microsoft Excel富文本值堆溢出漏洞（MS08-014）

BUGTRAQ ID: 28168 CVECAN ID: CVE-2008-0116 Excel是微软Office办公软件家族中的电子表格工具。 Excel在解析BIFF文件格式时存在堆溢出漏洞，成功利用这个漏洞的攻击者可能以当前登录用户的权限执行任意指令。 如果处理了畸形的标签，就可能由用户控制堆分配，在将用户提供的数据拷贝到堆缓冲区时就可以触发这个溢出，覆盖任意内存。 Microsoft Excel Viewer 2003 Microsoft Excel 2003 SP2 Microsoft Excel 2002 SP3 Microsoft Excel 2000 SP3...