iDefense Security Advisory 03.09.10: Microsoft Excel MDXTUPLE Record Heap Overflow Vulnerability

iDefense Security Advisory 03.09.10 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 09, 2010 I. BACKGROUND Excel is the spreadsheet application included with Microsoft Corp.'s Office productivity software suite. More information is available at the following website:...

CVE-2010-0260

Microsoft Excel MDXTUPLE/MDXSET heap overflow vulnerabilities (CVE-2010-0260, part of MS10-017) affect Excel 2007 SP1/SP2, Excel Viewer SP1/SP2, and the Office Compatibility Pack for Word/Excel/PowerPoint 2007. The issue arises while parsing the MDXTUPLE/MDXSET records in workbook globals, enabli...

Microsoft Excel MDXTUPLE and MDXSET Records Heap Overflow (MS10-017; CVE-2010-0260; CVE-2010-0261)

Microsoft Excel is a popular spreadsheet application. Multiple heap overflow vulnerabilities have been identified in Microsoft Excel. These vulnerabilities are due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger...