[Full-Disclosure] Buffer Overflow In Microsoft Excel

======================================================================== = Excel - Buffer Overflow In Microsoft Excel = = MS Bulletin posted: = http://www.microsoft.com/technet/security/bulletin/MS04-033.mspx = = Affected Software: = Microsoft Office 2000 Service Pack 3 Software: = - Excel 2000 =...

Microsoft Excel code execution

Buffer overflow on oversized strings copying...

Microsoft Security Bulletin MS04-033 Vulnerability in Microsoft Excel Could Allow Remote Code Execution (886836)

Microsoft Security Bulletin MS04-033 Vulnerability in Microsoft Excel Could Allow Remote Code Execution 886836 Issued: October 12, 2004 Version: 1.0 Vulnerability in Microsoft Excel Could Allow Code Remote Execution Who should read this document: Customers who use Microsoft Excel 2000, Microsoft...

Microsoft Excel File Handler Buffer Overflow Vulnerability

Description Microsoft Excel is reported prone to an buffer overflow vulnerability. The issue presents itself when the vulnerable software handles a malicious Excel file. Ultimately a remote attacker may exploit this vulnerability to execute arbitrary code. Code execution will occur in the context...

Microsoft Excel parameter validation error

Overview Microsoft has released a bulletin describing a remotely exploitable vulnerability in its Excel spreadsheet program. The vulnerability affects versions of Excel on Windows, MacOS 9, and MacOS X operating systems. Description There is a remotely exploitable vulnerability in Microsoft Excel...

MS04-033: Microsoft Excel Code Execution (886836)

The remote host has a version of Microsoft Excel that is vulnerable to a code execution issue. An attacker could exploit this flaw to execute arbitrary code on the remote host with the privileges of the user opening the file. To exploit this flaw, an attacker would need to send a malformed Excel...

CVE-2003-0821

Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM Excel 4 macro that bypasses the macro security model...

CVE-2003-0821

Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM Excel 4 macro that bypasses the macro security model...

CVE-2003-0821

CVE-2003-0821 covers a remote-code-execution vulnerability in Microsoft Excel 97, 2000, and 2002 due to a malicious Excel 4/XLM macro that bypasses the macro security model. Affected products could execute arbitrary code when a user opens a specially crafted spreadsheet, with the attacker potenti...

Microsoft Security Bulletin MS03-050

Microsoft Security Bulletin MS03-050 Print Vulnerability in Microsoft Word and Microsoft Excel Could Allow Arbitrary Code to Run 831527 Issued: November 11, 2003 Version: 1.0 See all Office bulletins released November, 2003 Summary Who should read this document: Customers who are using Microsoft®...

Microsoft Excel XLM Macro Security Level Bypass Vulnerability

Description A vulnerability has been reported to affect Microsoft Excel that could be exploited by an attacker to execute an XLM macro regardless of the macro security level. The issue has been reported to present itself due to a failure by Excel to sufficiently scan a malicious spreadsheet file...

MS03-050: Word and/or Excel may allow arbitrary code to run (831527)

The remote host is running a version of Microsoft Word and/or Microsoft Excel that are subject to a flaw that could allow arbitrary code to be run. An attacker could use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue Word or Excel file to the owne...

CVE-2002-1143

Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using 1 INCLUDETEXT or 2 INCLUDEPICTURE, aka "Flaw in Word Fields and Excel External Updates...

CVE-2002-1143

Affected software: Microsoft Word and Microsoft Excel (Office suite). Vulnerability: information disclosure via field codes in Word (INCLUDETEXT) and external updates in Excel, allowing remote attackers to insert and exfiltrate local data when a document is returned to the attacker. Root cause: m...

CVE-2002-1143

Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using 1 INCLUDETEXT or 2 INCLUDEPICTURE, aka "Flaw in Word Fields and Excel External Updates...

CVE-2002-0618

The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel workbook that contains an XSL stylesheet, aka "Excel XSL Stylesheet Script Execution"...

CVE-2002-0617

CVE-2002-0617 affects Microsoft Excel 2000 and 2002 on Windows. The vulnerability allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, known as the Hyperlinked Excel Workbook ...

CVE-2002-0618

CVE-2002-0618 affects Microsoft Excel 2000/2002 on Windows. The vulnerability stems from a flaw in the Macro Security Model that fails to detect HTML scripting within an Excel workbook containing an XSL stylesheet, allowing remote attackers to execute code in the Local Computer zone. Exploitation...

CVE-2002-0616

CVE-2002-0616 refers to the Excel Inline Macros vulnerability in Microsoft Excel 2000/2002 for Windows. The Macro Security Model allows remote attackers to execute code by attaching an inline macro to an object within an Excel workbook. Affected products are Excel 2000 and 2002 on Windows; the un...

CVE-2002-0616

The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by attaching an inline macro to an object within an Excel workbook, aka the "Excel Inline Macros Vulnerability."...