Microsoft Excel BIFF File Format Named Graph Record Parsing Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. Exploitation requires that the attacker coerce the target into opening a malicious .XLS file. The specific flaw exists within the parsing of the BIFF file format used by...

Excel Viewer OCX 3.1.0.6 Multiple Methods Denial of Service Exploit

No description provided by source. span style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------- bExcelViewer.ocx v. 3.1.0.6 multiple methods Denial of Service/b url: urlhttp://www.officeocx.com//url sell: from 63.95...

Excel Viewer OCX 3.1.0.6 - Multiple Denial of Service Vulnerabilities

Excel Viewer OCX 3.1.0.6 - Multiple Denial of Service Vulnerabilities 2007/05/02 ----------------------------------------------------------------------------- ExcelViewer.ocx v. 3.1.0.6 multiple methods Denial of Service url: http://www.officeocx.com/ sell: from €63.95 update to last version to...

Excel Viewer OCX 3.1.0.6 Multiple Methods Denial of Service Exploit

Exploit for unknown platform in category dos / poc =================================================================== Excel Viewer OCX 3.1.0.6 Multiple Methods Denial of Service Exploit =================================================================== 2007/05/02...

Excel Viewer OCX 3.1.0.6 - Multiple Denial of Service Vulnerabilities

2007/05/02 ----------------------------------------------------------------------------- ExcelViewer.ocx v. 3.1.0.6 multiple methods Denial of Service url: http://www.officeocx.com/ sell: from €63.95 update to last version to €1,585.95 Royalty author: shinnai mail: shinnaiatautisticidotorg...

Null pointer dereference

Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service application crash via a file with a 1 corrupted XML format or a 2 corrupted XLS format, which triggers a NULL pointer dereference...

CVE-2007-1239

Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service application crash via a file with a 1 corrupted XML format or a 2 corrupted XLS format, which triggers a NULL pointer dereference...

CVE-2007-1239

Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service application crash via a file with a 1 corrupted XML format or a 2 corrupted XLS format, which triggers a NULL pointer dereference...

CVE-2007-1239

Microsoft Excel 2003 contains a vulnerability in parsing .XLS files; a file with corrupted XML format or corrupted XLS format triggers a NULL pointer dereference, allowing remote attackers to cause a denial-of-service (application crash). The affected component is Excel’s workbook parsing for XLS...

CVE-2007-1239: Undefined Security Weakness

Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service application crash via a file with a 1 corrupted XML format or a 2 corrupted XLS format, which triggers a NULL pointer dereference...

Microsoft Excel畸形字符串远程代码执行漏洞(MS07-015)

Microsoft Excel是非常流行的电子表格处理办公软件。 Microsoft Excel处理畸形文件格式时存在漏洞，远程攻击者可能利用此漏洞通过诱骗用户打开恶意文件控制用户机器。 如果用户受骗打开了恶意的Excel文件的话，就可能导致执行任意代码。目前这个漏洞正在被名为Exploit-MSExcel.h的木马积极地利用。在打开畸形的XLS文件时会执行以下操作： 在内存中解压异或加密的shellcode 对于Windows XP Service Pack 2，使用硬编码的地址加载KERNEL32.DLL；对于其他Windows版本，Excel会崩溃...

Few unreported vulnerabilities by SehaTo

Hello lists, SehaTo sehato at yandex ru reported few vulnerabilities in different Windows applications. Original messages in Russian may be found at http://securityvulns.com/source16446.html 1. Microsoft Windows Explorer corrupted WMF vulnerability...

Microsoft Office Excel 2003 XLS File Denial Of Service

Microsoft Office Excel 2003 XLS File Denial Of Service В программе "Microsoft Office Excel 2003" компонент "DW20.EXE" вызывает ошибку при обработке файлов формата XLS Протестированно: Microsoft Office Excel 2003 11.6560.6568 SP2 Windows XP SP2 file "example.xls": ---begin--- MIME-Version: 1.0...

Microsoft Office Excel 2003 XLS File Denial Of Service

Microsoft Office Excel 2003 XLS File Denial Of Service Программа "Microsoft Office Excel 2003" вызывает ошибку при обработке файлов формата XLS Протестированно: Microsoft Office Excel 2003 11.6560.8122 SP2 Windows XP SP2 разные результаты можно получить при изменении последних 3 байт в файле...

Microsoft Excel Worksheet Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file .xls. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Excel DoS

NULL pointer dereference on corrupted XML/XLS files...

Microsoft Excel畸形字符串远程代码执行漏洞

Microsoft Excel是非常流行的电子表格处理办公软件。 Microsoft Excel处理畸形文件格式时存在漏洞，远程攻击者可能利用此漏洞通过诱骗用户打开恶意文件控制用户机器。 如果用户受骗打开了恶意的Excel文件的话，就可能导致执行任意代码。目前这个漏洞正在被名为Exploit-MSExcel.h的木马积极地利用。在打开畸形的XLS文件时会执行以下操作： 在内存中解压异或加密的shellcode 对于Windows XP Service Pack 2，使用硬编码的地址加载KERNEL32.DLL；对于其他Windows版本，Excel会崩溃...

Microsoft Excel memory access vulnerability

Overview An unspecified vulnerability in Microsoft Excel may allow a remote attacker to execute arbitrary code. Description Microsoft Excel contains a vulnerability. According to Microsoft Security Bulletin MS07-015 The vulnerability is caused when Excel opens a specially crafted Excel file which...

CVE-2007-0671

Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks...

CVE-2007-0671

Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks...