8440 matches found
Microsoft Excel rtWnDesk记录内存破坏漏洞（MS07-044）
BUGTRAQ ID: 25280 CVECAN ID: CVE-2007-3890 Microsoft Excel是微软Office套件中的电子表格工具。 Excel在处理畸形格式的文档时存在漏洞，远程攻击者可能利用此漏洞通过诱使用户处理恶意文件控制用户系统。 Excel没有正确地验证rtWnDesk记录中的索引值，如果用户受骗打开了特制的Excel Workspace（XLW）文件的话，就可以触发内存破坏，导致执行任意指令。 Microsoft Excel Viewer 2003 Microsoft Office XP SP3 Microsoft Office 2004 for Ma...
Microsoft Excel Workspace Index Value Memory Corruption (MS07-044; CVE-2007-3890)
Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of these vulnerabilities may allow execution of arbitrary code on a target...
Microsoft Excel Remote Code Execution Vulnerabilities (940965)
Binary data 4170.prm...
Microsoft Excel Remote Code Execution Vulnerabilities (940965)
Binary data 4169.prm...
Microsoft Excel Remote Code Execution Vulnerabilities (940965)
Binary data 4168.prm...
CVE-2007-3890
Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption...
Memory corruption
Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption...
CVE-2007-3890
CVE-2007-3890 is a remote code execution vulnerability in Microsoft Excel across Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac. The root cause is improper validation of the Workspace index value used in an Excel file’s workspace (rtWnDesk records), leading to memory cor...
CVE-2007-3890
Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption...
Security Update for Excel 2003 (KB940602)
A security vulnerability exists in Microsoft Office Excel 2003 that could allow remote code execution. This update resolves that vulnerability...
Security Update for Excel 2002 (KB940601)
A security vulnerability exists in Microsoft Excel 2002 that could allow remote code execution. This update resolves that vulnerability...
Security Update for Excel Viewer 2003 (KB940604)
A security vulnerability exists in Microsoft Office Excel Viewer 2003 that could allow arbitrary code to run when opening a malicious document. This update addresses that vulnerability...
Microsoft Excel memory corruption
Index value is not checked on Workspace parsing...
Microsoft Excel Worksheet Index Value Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file .xls. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...
Microsoft Security Bulletin MS07-044 - Critical Vulnerability in Microsoft Excel Could Allow Remote Code Execution (940965)
Microsoft Security Bulletin MS07-044 - Critical Vulnerability in Microsoft Excel Could Allow Remote Code Execution 940965 Published: August 14, 2007 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in addition to other security...
MS07-044: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (940965)
The remote host is running a version of Microsoft Excel that is affected by various flaws that may allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with Microsoft Excel. C Tenable Network Security, Inc...
Microsoft Excel版本信息验证内存破坏漏洞（MS07-036）
BUGTRAQ ID: 24801 CVECAN ID: CVE-2007-1756 Microsoft Excel是Office套件中的电子表格工具。 Excel在处理畸形格式的文件时存在漏洞，远程攻击者可能利用此漏洞通过诱使用户打开处理畸形文件控制用户系统。 Excel没有正确地验证版本信息，如果用户受骗打开了畸形的Excel文件的话，就可能触发内存破坏，导致执行任意指令。 Microsoft Excel Viewer 2003 Microsoft Excel 2007 Microsoft Excel 2003 SP2 Microsoft Excel 2002 SP2 Microso...
Microsoft Excel工作区指定内存破坏漏洞（MS07-036）
BUGTRAQ ID: 24803 CVECAN ID: CVE-2007-3030 Microsoft Excel是Office套件中的电子表格工具。 Excel在处理包含畸形数据的文件时存在漏洞，远程攻击者可能利用此漏洞通过诱使用户处理恶意文件控制用户系统。 Excel在标识工作区指定的开始时没有执行充分的验证，如果用户受骗打开了畸形的Excel文件的话，就可能触发内存破坏，导致执行任意代码。 Microsoft Excel Viewer 2003 Microsoft Excel 2003 SP2 Microsoft Excel 2002 SP3 Microsoft Excel 20...
CVE-2007-3030
Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file involving the "denoting of the start of a Workspace designation", which results in memory corruption, aka the "Workbook Memory Corruption...
CVE-2007-3029
Unspecified vulnerability in Microsoft Excel 2002 SP3 and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file containing multiple active worksheets, which results in memory corruption...