Microsoft Excel 'SerAuxErrBar'堆溢出远程代码执行漏洞(MS12-076)

BUGTRAQ ID: 56425 CVE ID: CVE-2012-1885 Excel是微软公司的办公软件的试算表软件组件。 Microsoft Excel 2003 SP3、2007 SP2/SP3、2010 SP1、Office 2008/2011 for Mac、Office Compatibility Pack SP2\SP3存在堆缓冲区溢出漏洞，通过特制的电子表格，可允许远程攻击者执行任意代码。 0 Microsoft Excel 2010 Microsoft Excel 2003 Microsoft Office Microsoft Office 2003 Profess...

Microsoft Office for Mac不正确文件夹权限本地特权提升漏洞

Bugtraq ID:54361 CVE ID:CVE-2012-1894 Microsoft Office是一款微软提供的办公软件套件。 Microsoft Office for Mac 2011设置的"Applications/Microsoft Office 2011/"目录和其他目录为全局可写权限，本地用户可利用漏洞在这些目录之中放置恶意目录，来以目标用户特权执行恶意代码。 0 Microsoft Office for Mac 2011 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...

CVE-2012-1894

Microsoft Office for Mac 2011 uses world-writable permissions for the "Applications/Microsoft Office 2011/" directory and certain other directories, which allows local users to gain privileges by placing a Trojan horse executable file in one of these directories, aka "Office for Mac Improper Fold...

Design/Logic Flaw

Microsoft Office for Mac 2011 uses world-writable permissions for the "Applications/Microsoft Office 2011/" directory and certain other directories, which allows local users to gain privileges by placing a Trojan horse executable file in one of these directories, aka "Office for Mac Improper Fold...

CVE-2012-1894

Microsoft Office for Mac 2011 uses world-writable permissions for the "Applications/Microsoft Office 2011/" directory and certain other directories, which allows local users to gain privileges by placing a Trojan horse executable file in one of these directories, aka "Office for Mac Improper Fold...

CVE-2012-1894: Undefined Security Weakness

Microsoft Office for Mac 2011 uses world-writable permissions for the "Applications/Microsoft Office 2011/" directory and certain other directories, which allows local users to gain privileges by placing a Trojan horse executable file in one of these directories, aka "Office for Mac Improper Fold...

PT-2012-3632

Name of the Vulnerable Software and Affected Versions Microsoft Office for Mac 2011 Description The issue allows local users to gain privileges by placing a Trojan horse executable file in certain directories due to improper folder permissions. Recommendations For Microsoft Office for Mac 2011,...

Microsoft Excel 内存破坏远程代码执行漏洞(CVE-2012-0143)(MS12-030)

BUGTRAQ ID: 53374 CVE ID: CVE-2012-0143 Excel是微软公司的办公软件Microsoft office的组件之一，是由Microsoft为Windows和Apple Macintosh操作系统的电脑而编写和运行的一款试算表软件。 Microsoft Excel在实现上存在远程代码执行漏洞，攻击者通过诱使用户打开特制的Excel文件，利用此漏洞以当前用户权限执行任意代码。 0 Microsoft Office Excel 2003 Microsoft Office Office for Mac 2011 Microsoft Office Office...

CVE-2011-1983: Undefined Security Weakness

Use-after-free vulnerability in Microsoft Office 2007 SP2 and SP3, Office 2010 Gold and SP1, and Office for Mac 2011 allows remote attackers to execute arbitrary code via a crafted Word document, aka "Word Use After Free Vulnerability."...

Microsoft Office艺术绘图记录解析内存破坏漏洞（MS10-087）

BUGTRAQ ID: 44656 CVE ID: CVE-2010-3334 Microsoft Office是非常流行的办公软件套件。 Office在解析艺术绘图记录时没有充分地执行验证，如果msofbtSp记录指定了某些标志就可以触发内存破坏，导致执行任意代码。 Microsoft Office XP SP3 Microsoft Office for Mac 2011 Microsoft Office 2010 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Office 2003...

CVE-2010-3336: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "MSO Large SPID Read AV Vulnerability."...

CVE-2010-3334: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via an Office document containing an Office Art Drawing record with crafted msofbt...

PT-2010-4746

Name of the Vulnerable Software and Affected Versions Microsoft Office XP SP3 Office 2004 for Mac Office 2008 for Mac Office for Mac 2011 Open XML File Format Converter for Mac Description The issue allows remote attackers to execute arbitrary code via a crafted Office document that triggers memo...