8440 matches found
Security Update for Excel 2002 (KB925523)
A security vulnerability exists in Microsoft Excel 2002 that could allow remote code execution. This update resolves that vulnerability...
Security Update for Excel Viewer 2003 (KB925525)
A security vulnerability exists in Microsoft Office Excel Viewer 2003 that could allow remote code execution. This update resolves that vulnerability...
Microsoft Excel IMDATA Record Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code with the privileges of the user running the application, which can result in the compromise of affected computers. Technologies Affected Microsoft Excel 2000...
[Full-disclosure] iDefense Security Advisory 01.09.07: Microsoft Excel Long Palette Heap Overflow Vulnerability
Microsoft Excel Long Palette Heap Overflow Vulnerability iDefense Security Advisory 01.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 09, 2007 I. BACKGROUND Microsoft Excel is the spreadsheet application from the Microsoft Office System. More information is available at the...
[Full-disclosure] iDefense Security Advisory 01.09.07: Microsoft Excel Invalid Column Heap Corruption Vulnerability
Microsoft Excel Invalid Column Heap Corruption Vulnerability iDefense Security Advisory 01.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 09, 2007 I. BACKGROUND Microsoft Excel is the spreadsheet application from the Microsoft Office System. More information is available at the...
Microsoft Excel vulnerable to arbitrary code execution via malformed record
Overview A vulnerability in Microsoft Excel may allow an attacker to execute arbitrary code on a vulnerable system. Description A vulnerability exists in the way Microsoft Excel handles malformed records.Per Microsoft Security Bulletin MS07-002: A remote code execution vulnerability exists in...
Microsoft Excel Malformed Column Record Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker could exploit this issue to execute arbitrary code with the privileges of the user running the application. The attacker could leverage the issue to compromise affected computers. Technologies Affected...
Microsoft Excel fails to properly handle malformed IMDATA records
Overview A vulnerability in the way that Microsoft Excel handles malformed image records could allow an attacker to execute arbitrary code on a vulnerable system. Description Microsoft Excel fails to properly validate the size of IMDATA records. When a file containing a malformed IMDATA record is...
Microsoft Excel fails to properly parse malformed Palette records
Overview A vulnerability in the way that Microsoft Excel handles malformed Palette records could allow an attacker to execute arbitrary code on a vulnerable system. Description Microsoft Excel fails to properly handle Palette records embedded in Excel documents. When a file containing a malformed...
MS07-002: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (927198)
The remote host is running a version of Microsoft Excel that is subject to various flaws that could allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have i...
Microsoft Excel fails to properly process a malformed Column record
Overview Microsoft Excel contains a memory corruption vulnerability that could enable an attacker to exectue arbitrary code and gain complete control of the vulnerable system. Description Microsoft Excel fails to properly handle malformed Column records. When an Excel file is opened, Excel does n...
Microsoft Excel Malformed String Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code with the privileges of the user running the affected application, which could result in the compromise of affected computers. Technologies Affected Microsoft...
Microsoft Security Bulletin MS07-002 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (927198)
Microsoft Security Bulletin MS07-002 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution 927198 Published: January 9, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Excel Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...
Microsoft Excel Opcode Handling Unspecified Remote Code Execution Vulnerability
Description Microsoft Excel is reportedly prone to an unspecified remote code-execution vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of targeted users. Note that Microsoft Office applications include functionality to embed Office file...
Microsoft Excel Malformed Palette Record Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected application, which can result in the compromise of affected computers. Technologies Affected Microsoft...
Security Update for Excel 2002 (KB923089)
A security vulnerability exists in Microsoft Excel 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Microsoft Office嵌入Shockwave Flash对象绕过安全限制漏洞（MS06-069）
Microsoft Excel是非常流行的电子表格办公软件。 Microsoft Excel对文件中的对象处理存在漏洞，攻击者可能利用此漏洞在用户机器上执行任意指令。 攻击可以使用Shockwave Flash Object将有Java脚本的恶意Flash文件嵌入到Excel表单中，这样如果用户打开了该文件的话便无需用户交互便自动运行该对象。 Microsoft Excel 2003 Microsoft Office 2003 Microsoft已经为此发布了一个安全公告（MS06-069）以及相应补丁: MS06-069：Vulnerabilities in Macromedia...
Microsoft Excel 文件远程代码执行重建漏洞
Microsoft Excel 文件远程代码执行重建漏洞 成功利用此漏洞攻击者可以存储和执行过程中的腐败行为在对任意对象使用.看到Microsoft Office应用包括办公功能嵌入对象包含在其他档案处档案.为例,Microsoft Word文档可能含有恶意嵌入Excel的档案、文件,另一个可能的攻击使文字载体. Microsoft Excel x for Mac 0 + Microsoft Office 2003 SP1 Microsoft Excel Viewer 2003 0 + Microsoft Office 2003 SP1 Microsoft Excel 2004 for...
Microsoft Office Excel畸形文件格式解析远程代码执行漏洞（MS06-012）
Microsoft Office Excel是非常流行的电子表格办公软件。 Microsoft Office Excel在处理Excel文档中畸形解析格式时存在漏洞，攻击者可能利用此漏洞在客户机器上执行任意代码。 使用畸形解析格式文件的Excel中存在一个远程执行代码漏洞。攻击者可以通过构建特制的Excel文件来利用此漏洞，可能允许远程执行代码。 Microsoft Office XP SP3 Microsoft Office X for Mac Microsoft Office 2004 for Mac Microsoft Office 2003 Service Pack 2...
Microsoft Office Excel畸形图形远程代码执行漏洞（MS06-012）
Microsoft Office Excel是非常流行的电子表格办公软件。 Microsoft Office Excel在处理Excel文档中的畸形图像文档时存在漏洞，攻击者可能利用此漏洞在客户机器上执行任意代码。 使用畸形图形的Excel中存在一个远程执行代码漏洞。攻击者可以通过构建特制的Excel文件来利用此漏洞，可能允许远程执行代码。 Microsoft Office XP SP3 Microsoft Office X for Mac Microsoft Office 2004 for Mac Microsoft Office 2003 Service Pack 2 Microso...