CVE-2008-4019

CVE-2008-4019 is an integer overflow in Excel’s REPT function used when parsing a formula within a cell, affecting multiple Windows and Mac Excel versions (e.g., 2000 SP3, 2002 SP3, 2003 SP2/SP3, 2007 Gold/SP1) and related viewers/compat packs. The vulnerability allows remote code execution if a ...

Microsoft Excel Remote Code Execution Vulnerability (956416)

This host is missing critical security update according to Microsoft Bulletin MS08-057. OpenVAS Vulnerability Test $Id: secpodms08-057900048.nasl 6538 2017-07-05 11:38:27Z cfischer $ Description: Microsoft Excel Remote Code Execution Vulnerability 956416 Authors: Chandan S Copyright: Copyright C...

[Full-disclosure] ZDI-08-068: Microsoft Office Excel BIFF File Format Parsing Stack Overflow Vulnerability

ZDI-08-068: Microsoft Office Excel BIFF File Format Parsing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-068 -- CVE ID: CVE-2008-3471 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office Excel -- TippingPointTM IPS Customer Protection:...

MS08-057: Microsoft Excel Multiple Method Remote Code Execution (956416)

The remote host is running a version of Microsoft Excel that is subject to various flaws which could allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have ...

Security Update for Microsoft Office Excel 2007 (KB955470)

A security vulnerability exists in Microsoft Office Excel 2007 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office Excel Viewer 2003 (KB955468)

A security vulnerability exists in Microsoft Office Excel Viewer 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office Excel 2003 (KB955466)

A security vulnerability exists in Microsoft Office Excel 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office Excel Viewer (KB955935)

A security vulnerability exists in Microsoft Excel Viewer that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Excel 2002 (KB955464)

A security vulnerability exists in Microsoft Excel 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Security Bulletin MS08-057 – Critical Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (956416)

Microsoft Security Bulletin MS08-057 – Critical Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution 956416 Published: October 14, 2008 Version: 1.0 General Information Executive Summary This security update resolves three privately reported vulnerabilities in Microsoft Office Exc...

Microsoft Excel Formula Parsing Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Excel Calendar Object Validation Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

PT-2008-4872 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 Description: The issue arises from improper validation of data in the VBA Performance Cache when processing an Office document with an embedded object. This allows remote...

Microsoft Excel FRTWrapper Record Buffer Overflow (MS08-057; CVE-2008-3471)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the way Microsoft Excel processes objects when loading Excel files into memory. The vulnerability is due to an error in Microsoft Excel that fails to perform sufficient validation wh...

Microsoft Excel VisualBasic Object Validation Code Execution (MS08-057; CVE-2008-3477)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the way Microsoft Excel processes compiled VBA Projects. The vulnerability is due to an error in Microsoft Excel that fails to perform sufficient validation when using the Calendar...

Microsoft Office Excel REPT Formula Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page, or open a malicious file. The specific flaw exists when parsing Microsof...

Microsoft Excel BIFF File Format Parsing Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Office Excel BIFF File Format Parsing Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. Exploitation requires that the victim to open the malformed BIFF .xls document. The specific flaw exists within the parsing of the BIFF file format used by Microsoft Excel...

CVE-2008-4211

Integer signedness error in 1 QuickLook in Apple Mac OS X 10.5.5 and 2 Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted Microsoft Exce...

Integer overflow

Integer signedness error in 1 QuickLook in Apple Mac OS X 10.5.5 and 2 Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted Microsoft Exce...