Secunia Research: Microsoft Excel Record Parsing Array Indexing Vulnerability

====================================================================== Secunia Research 09/06/2009 - Microsoft Excel Record Parsing Array Indexing Vulnerability - ====================================================================== Table of Contents Affected...

Microsoft Security Bulletin MS09-021 - Critical Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (969462)

Microsoft Security Bulletin MS09-021 - Critical Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution 969462 Published: June 9, 2009 Version: 1.0 General Information Executive Summary This security update resolves several privately reported vulnerabilities that could allow...

MS09-021: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (969462)

The remote host contains a version of Microsoft Excel / Excel Viewer / 2007 Microsoft Office system or the Microsoft Office Compatibility Pack that is affected by several buffer overflow and memory corruption vulnerabilities. If an attacker can trick a user on the affected host into opening a...

Security Update for Microsoft Office Excel Viewer (KB969686)

A security vulnerability exists in Microsoft Office Excel Viewer that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves the vulnerability so that Microsoft Office Excel Viewer documents are handled appropriately...

Security Update for Microsoft Office Excel 2003 (KB969681)

A security vulnerability exists in Microsoft Office Excel 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves the vulnerability so that Microsoft Office Excel 2003 documents are handled appropriately...

Security Update for Microsoft Office Excel Viewer 2003 (KB969685)

A security vulnerability exists in Microsoft Office Excel Viewer 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves the vulnerability so that Microsoft Office Excel Viewer 2003 documents are handled appropriately...

Security Update for Microsoft Office Excel 2007 (KB969682)

A security vulnerability exists in Microsoft Office Excel 2007 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves the vulnerability so that Microsoft Office Excel 2007 documents are handled appropriately...

Security Update for Microsoft Excel 2002 (KB969680)

A security vulnerability exists in Microsoft Excel 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves the vulnerability so that Microsoft Excel 2002 documents are handled appropriately...

Microsoft Excel QSIR Record Pointer Corruption Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel '.xls' file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Excel Field Sanitization Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Excel FormulaValue Field Memory Corruption (MS09-021; CVE-2009-0560)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The flaw is due to a memory corruption error in Microsoft Excel when loading specially crafted Excel files that include a malformed record object. The...

Microsoft Excel Record Object Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Excel Array Indexing Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Excel QSir and QSif Records Pointer Corruption (MS09-021; CVE-2009-1134)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The flaw is due to a memory corruption error in Microsoft Excel when loading specially crafted Excel files that include a malformed record object. The...

Microsoft Excel Malformed Shared String Table Record Integer Overflow Vulnerability

Description Microsoft Excel is prone to an integer-overflow vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the application...

Microsoft Excel Object Record Memory Corruption (MS09-021; CVE-2009-0557)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to a memory corruption error in Microsoft Excel when loading specially crafted Excel files that include a malformed record object. A...

Microsoft Excel String Copy Stack Overflow Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Excel ExternSheet Record Indexing Memory Corruption (MS09-021; CVE-2009-0558)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to a memory corruption error when Microsoft Excel reads a value from a specially crafted Excel file and then uses it as an index into an...

Microsoft Excel Record Pointer Corruption Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Excel String Copy Stack-Based Overrun (MS09-021; CVE-2009-0559)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to a memory corruption error in Microsoft Excel when loading specially crafted Excel files that include a malformed record object. A...