Microsoft Excel MDXTUPLE and MDXSET Records Heap Overflow (MS10-017; CVE-2010-0260; CVE-2010-0261)

Microsoft Excel is a popular spreadsheet application. Multiple heap overflow vulnerabilities have been identified in Microsoft Excel. These vulnerabilities are due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger...

Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists in the decompression of XLSX files. The XL...

Microsoft Excel Malformed Graphic Code Execution (MS06-012; CVE-2006-0030)

Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available in several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...

Microsoft Excel Malformed OBJECT Record Code Execution (MS06-037; CVE-2006-1306)

There exists an arbitrary index pointer code execution vulnerability in Microsoft Excel. The flaw is caused by an insufficient check of a malformed OBJECT Record in an Excel file. An attacker can exploit this vulnerability to inject and execute arbitrary code in the security context of the...

Microsoft Excel File Named Graph Record Parsing Stack Overflow (MS07-023; CVE-2007-0215)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

Microsoft Excel Malformed FEATHEADER Record Vulnerability

$Id: ms09067excelfeatheader.rb 8474 2010-02-13 06:57:58Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Excel Set Font Handling Code Execution (MS07-023; CVE-2007-1203)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

MS09-067 Microsoft Excel Malformed FEATHEADER Record Vulnerability

This module exploits a vulnerability in the handling of the FEATHEADER record by Microsoft Excel. Revisions of Office XP and later prior to the release of the MS09-067 bulletin are vulnerable. When processing a FEATHEADER Shared Feature record, Microsoft used a data structure from the file to...

CORE-2009-0827: Microsoft Office Excel / Word OfficeArtSpgr Container Pointer Overwrite Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Microsoft Office Excel / Word OfficeArtSpgr Container Pointer Overwrite Vulnerability 1. Advisory Information Title: Microsoft Office Excel / Word OfficeArtSpgr...

Microsoft Office Drawing Shape Group Properties Buffer Overflow (MS10-003; CVE-2010-0243)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been reported in the way Microsoft Office handles specially crafted Excel files. The vulnerability is due to a memory corruption error in Microsoft Office when loading malformed Excel records. A remote...

Microsoft Office Excel / Word OfficeArtSpgr Container Pointer Overwrite Vulnerability

Advisory ID Internal CORE-2009-0827 1. Advisory Information Title: Microsoft Office Excel / Word OfficeArtSpgr Container Pointer Overwrite Vulnerability Advisory Id: CORE-2009-0827 Date published: 2010-02-09 Date of last update: 2010-02-08 Vendors contacted: Microsoft Release mode: Coordinated...

Microsoft Excel rtWindow1 Record Handling Code Execution (CVE-2007-3029)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formula, and various data sources. The common extension used for Microsoft Excel documents is .xls or .xlw....

CVE-2010-0279

Unrestricted file upload vulnerability in upload.php in BTS-GI Read excel 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of these details are obtaine...

Unrestricted file upload

Unrestricted file upload vulnerability in upload.php in BTS-GI Read excel 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of these details are obtaine...

CVE-2010-0279

CVE-2010-0279 describes an unrestricted file upload vulnerability in upload.php of BTS-GI Read excel 1.1 that enables remote code execution by uploading a file with an executable extension and accessing it directly in an unspecified directory. The root cause is improper handling of uploaded files...

CVE-2010-0279

Unrestricted file upload vulnerability in upload.php in BTS-GI Read excel 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of these details are obtaine...

Read Excel 1.1 Shell Upload

Read Excel v1.1 Shell Upload Vulnerability Author : Yozgat.Us Website : WWW.YOZGAT.US ======================================= Script : Read Excel v1.1 Shell Upload Site : http://www.bts-gi.net.tc/home.php Tx : http://www.comscripts.com/scripts/php.read-excel.2210.html Demo :...

Read Excel Script 1.1 - Arbitrary File Upload

Read Excel v1.1 Shell Upload Vulnerability Author : Yozgat.Us Website : WWW.YOZGAT.US ======================================= Script : Read Excel v1.1 Shell Upload Vendor : http://www.bts-gi.net.tc/home.php ======================================= Vuln : http://yozgat.us/ ReadExcelPath /index.php...

Read Excel Script v1.1 Shell Upload Vulnerability

Exploit for unknown platform in category web applications ================================================= Read Excel Script v1.1 Shell Upload Vulnerability ================================================= ======================================= Script : Read Excel v1.1 Shell Upload Vendor :...

Read Excel Script 1.1 - Arbitrary File Upload

Read Excel Script 1.1 - Arbitrary File Upload Read Excel v1.1 Shell Upload Vulnerability Author : Yozgat.Us Website : WWW.YOZGAT.US ======================================= Script : Read Excel v1.1 Shell Upload Vendor : http://www.bts-gi.net.tc/home.php ======================================= Vuln...