VulnCheck KEV: CVE-2009-3129

Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset...

Microsoft Excel远程代码执行漏洞(MS11-096)

BUGTRAQ ID: 50954 CVE ID: CVE-2011-3403 Excel是微软公司的办公软件Microsoft office的组件之一，是由Microsoft为Windows和Apple Macintosh操作系统的电脑而编写和运行的一款试算表软件。 Excel在处理特制Excel文件的实现上存在远程代码执行漏洞，成功利用后可允许攻击者以当前用户权限执行任意代码。 Microsoft Excel 2003 SP3 Microsoft Office 2004 for Mac 0 临时解决方法： 在Excel 2003中设置Office文件验证以禁止打开没有通过验证的文件。...

Memory corruption

Microsoft Excel 2003 SP3 and Office 2004 for Mac do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet, aka "Record Memory Corruption Vulnerability."...

CVE-2011-3403

CVE-2011-3403 affects Microsoft Excel 2003 SP3 and Office 2004 for Mac, where improper handling of in-memory objects during parsing of crafted Excel files enables remote code execution. The vulnerability, dubbed “Record Memory Corruption Vulnerability,” is rated CVSSv2 base 9.3 (Network, single a...

Microsoft Office Excel Remote Code Execution Vulnerability (2640241)

This host is missing an important security update according to Microsoft Bulletin MS11-096. OpenVAS Vulnerability Test $Id: secpodms11-096.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Office Excel Remote Code Execution Vulnerability 2640241 Authors: Antu Sanadi Copyright: Copyright c 2011...

Microsoft Excel Record Parsing Code Execution (MS11-096; CVE-2011-3403)

A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to improper handling of certain records in Microsoft Excel while parsing malformed Excel files. A remote attacker could trigger the vulnerability by enticing an affected target user to open a...

MS11-096: Vulnerability in Microsoft Excel Could Allow Remote Code Execution (2640241)

The remote Windows host is running a version of Microsoft Office 2003 that contains a remote code execution vulnerability in Excel. If an attacker can trick a user on the affected host into opening a specially crafted Excel file, he could leverage this issue to execute arbitrary code subject to t...

Microsoft Excel CVE-2011-3403 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability due to a memory-corruption error. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the...

Preemptive Protection against Microsoft Excel Incorrect BIFF2 Record Parsing Code Execution (MS11-072; CVE-2011-1988)

A remote code execution vulnerability has been reported in Microsoft Excel...

Microsoft Excel - Malformed OBJ Record Handling Overflow (MS11-038) (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS11-038 Microsof...

Microsoft Excel Substream Parsing Integer Overflow

Added: 11/08/2011 CVE: CVE-2011-0097 OSVDB: 71758 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem Microsoft Excel 2007 versions lacking the patch KB2464583 detailed in Microsoft Security Advisory...

Microsoft Excel Substream Parsing Integer Overflow

Added: 11/08/2011 CVE: CVE-2011-0097 OSVDB: 71758 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem Microsoft Excel 2007 versions lacking the patch KB2464583 detailed in Microsoft Security Advisory...

Microsoft Excel Substream Parsing Integer Overflow

Added: 11/08/2011 CVE: CVE-2011-0097 OSVDB: 71758 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem Microsoft Excel 2007 versions lacking the patch KB2464583 detailed in Microsoft Security Advisory...

Microsoft Excel释放后重用远程代码执行漏洞

BUGTRAQ ID: 50533 Microsoft Excel是微软公司的办公软件Microsoft office的组件之一，是由Microsoft为Windows和Apple Macintosh操作系统的电脑而编写和运行的一款试算表软件。Excel 是微软办公套装软件的一个重要的组成部分，它可以进行各种数据的处理、统计分析和辅助决策操作，广泛地应用于管理、统计财经、金融等众多领域。 Microsoft Excel在处理vbscript宏的代码时存在释放后重用漏洞，远程攻击者可利用此漏洞执行任意代码。 Microsoft Excel 2003 SP3 厂商补丁： Microsoft...

Microsoft Excel 2007 - '.xlb' Local Buffer Overflow (MS11-021) (Metasploit)

$Id: ms11021xlbbof.rb 14172 2011-11-06 20:16:34Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Microsoft Excel 2003 11.8335.8333 - Use-After-Free

Microsoft Excel 2003 11.8335.8333 - Use-After-Free Luigi Auriemma Application: Microsoft Excel http://office.microsoft.com/en-us/excel/ http://office.microsoft.com/en-us/downloads/CD001022531.aspx Versions: tested Office 2003 11.8335.8333 SP3 Platforms: Windows Bug: use after free Exploitation:...

Microsoft Excel 2003 11.8335.8333 - Use-After-Free

Luigi Auriemma Application: Microsoft Excel http://office.microsoft.com/en-us/excel/ http://office.microsoft.com/en-us/downloads/CD001022531.aspx Versions: tested Office 2003 11.8335.8333 SP3 Platforms: Windows Bug: use after free Exploitation: file Date: 03 Nov 2011 found 24 Aug 2011 Author: Lui...

Microsoft Excel 2007 SP2 Buffer Overwrite Exploit

No description provided by source. Abysssec Research 1 Advisory information Title : Microsoft Excel 2007 SP2 Buffer Overwrite Vulnerability Analysis : Abysssec.com Vendor : http://www.microsoft.com Impact : Critical Contact : info at abysssec.com Twitter : @abysssec Microsoft : A remote code...

Microsoft Excel 2007 SP2 - Buffer Overwrite (MS11-021)

Abysssec Research 1 Advisory information Title : Microsoft Excel 2007 SP2 Buffer Overwrite Vulnerability Analysis : Abysssec.com Vendor : http://www.microsoft.com Impact : Critical Contact : info at abysssec.com Twitter : @abysssec Microsoft : A remote code execution vulnerability exists in the w...

Microsoft Excel 2007 SP2 - Buffer Overwrite (MS11-021)

Microsoft Excel 2007 SP2 - Buffer Overwrite MS11-021 Abysssec Research 1 Advisory information Title : Microsoft Excel 2007 SP2 Buffer Overwrite Vulnerability Analysis : Abysssec.com Vendor : http://www.microsoft.com Impact : Critical Contact : info at abysssec.com Twitter : @abysssec Microsoft : ...