Microsoft Word 95/97/98/2000/2002 / Excel 2002 - INCLUDETEXT Document Sharing File Disclosure

source: https://www.securityfocus.com/bid/5586/info The Microsoft Word and Excel INCLUDETEXT Field Code may be used to insert an arbitrary local file into a document. The INCLUDETEXT Field Code is reported to, under some circumstances, present a security threat. If the INCLUDETEXT Field Code is...

Microsoft Word 95979820002002 Excel 2002 - INCLUDETEXT Document Sharing File Disclosure

Microsoft Word 95979820002002 Excel 2002 - INCLUDETEXT Document Sharing File Disclosure source: https://www.securityfocus.com/bid/5586/info The Microsoft Word and Excel INCLUDETEXT Field Code may be used to insert an arbitrary local file into a document. The INCLUDETEXT Field Code is reported to,...

CVE-2002-0616

The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by attaching an inline macro to an object within an Excel workbook, aka the "Excel Inline Macros Vulnerability."...

CVE-2002-0617

The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, aka "Hyperlinked Excel Workbook Macro Bypass."...

CVE-2002-0618

The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel workbook that contains an XSL stylesheet, aka "Excel XSL Stylesheet Script Execution"...

CVE-2002-0152: Undefined Security Weakness

Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service crash or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2,...

Security Bulletin MS02-031: Cumulative Patches for Excel and Word for Windows (Q324458)

---------------------------------------------------------------------- Title: Cumulative Patches for Excel and Word for Windows Q324458 Date: 19 June 2002 Software: Microsoft Office for Windows Impact: Run Code of Attacker's Choice Max Risk: Moderate Bulletin: MS02-031 Microsoft encourages...

Excel XP xml stylesheet problems

Georgi Guninski security advisory 55, 2002 Excel XP xml stylesheet problems Systems affected: Excel XP Risk: Low user interaction required Date: 24 May 2002 Legal Notice: This Advisory is Copyright c 2002 Georgi Guninski. You may distribute it unmodified. You may not modify it and distribute it o...

[NT] Excel XP XML Stylesheet Security Problem

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...

w00w00 on Microsoft IE/Office for Mac OS

w00w00 http://www.w00w00.org Angry Packet Security http://sec.angrypacket.com Vulnerability in Multiple Microsoft Products for Mac OS HTML format: http://www.w00w00.org/advisories/msmacos.html Text format: http://www.w00w00.org/files/advisories/msmacos.txt SOFTWARE VERSIONS AFFECTED Microsft...

CVE-1999-1055

CVE-1999-1055 (Microsoft Excel 97) vulnerabilities allow a malicious workbook to run arbitrary commands via the CALL worksheet function without warning. Affects Excel 97; root cause: worksheet functions can execute a malicious DLL. According to NVD, the issue has a base score of 7.5 (HIGH) with N...

CVE-2001-0718

The CVE-2001-0718 issue affects Microsoft Excel and PowerPoint (across Windows and Macintosh releases up to 2002). Affected components are the macro handling/data stream processing; attackers can bypass macro restrictions by modifying the document data stream, enabling arbitrary code execution wh...

CVE-2001-0718

Vulnerability in 1 Microsoft Excel 2002 and earlier and 2 Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document...

CVE-1999-1055

Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability."...

CVE-1999-1055: Undefined Security Weakness

Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability."...

CVE-2001-0718: Undefined Security Weakness

Vulnerability in 1 Microsoft Excel 2002 and earlier and 2 Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document...

CVE-2001-0718

Vulnerability in 1 Microsoft Excel 2002 and earlier and 2 Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document...

Microsoft PowerPoint and Excel fail to properly detect macros thereby automatically executing malicious code via crafted document (MS01-050)

Overview A malformed Microsoft Excel or PowerPoint document can bypass macro checking thereby allowing arbitrary code to be run on the target system. Description Microsoft Excel and PowerPoint scan documents when they are opened and check for the existence of macros. If the document contains...

Symantec Security Response SecBul-10042001, Revision1, Malformed Microsoft Excel or PowerPoint documents bypass Microsoft macro security features

Symantec Security Bulletin Symantec Security Response SecBul-10042001 Date Issued: 04 October 2001 Revision 1: 05 October,2001 HEADLINE: Malformed Microsoft Excel or PowerPoint documents bypass Microsoft macro security features. SOURCE: Symantec Corporation. RISK Impact: High Unauthorized macro...

Security Bulletin MS01-050

---------------------------------------------------------------------- Title: Malformed Excel or PowerPoint Document Can Bypass Macro Security Date: 04 October 2001 Software: Microsoft Excel or PowerPoint for Windows or Macintosh Impact: Run Code Of Attacker's Choice Bulletin: MS01-050 Microsoft...