Microsoft Office Excel Remote Code Execution Vulnerabilities (2858300)

This host is missing an important security update according to Microsoft Bulletin MS13-073. OpenVAS Vulnerability Test $Id: secpodmsexcelms13-073.nasl 6104 2017-05-11 09:03:48Z teissa $ Microsoft Office Excel Remote Code Execution Vulnerabilities 2858300 Authors: Antu Sanadi Copyright: Copyright ...

MS13-073: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2858300) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Excel that is affected by the following vulnerabilities : - Two memory corruption vulnerabilities exist due to the way the application handles objects in memory when parsing Office files. CVE-2013-1315 / CVE-2013-3158 - An information...

Microsoft Excel CVE-2013-1315 Memory Corruption Vulnerability

Description Microsoft Excel is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Excel 2003 SP3 Microsoft...

Microsoft Excel CVE-2013-3158 Memory Corruption Vulnerability

Description Microsoft Excel is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Excel 2003 SP3 Microsoft...

MS13-073: Description of the security update for Microsoft Excel 2013: September 10, 2013

This security update addresses the vulnerabilities by correcting how Microsoft Excel and other affected Microsoft software validates data when parsing specially crafted Office files and by correcting the manner in which the XML parser used by Excel resolves external entities within a specially...

Microsoft Excel Read Access Violation Remote Code Execution (MS13-073; CVE-2013-3158)

A remote code execution vulnerability has been reported in Microsoft Excel...

Microsoft Excel CVE-2013-3159 XML Files Handling Information Disclosure Vulnerability

Description Microsoft Excel is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Excel 2003 SP3 Microsoft Excel 2007 SP3 Microsoft Excel 2010 SP1 32-bit editions...

Microsoft Excel Memory Corruption (MS13-067; CVE-2013-1315)

A remote code execution vulnerability exists in the way that Microsoft Excel parses content in Excel files...

MS13-073: Vulnerabilities in Microsoft Excel could allow remote code execution: September 10, 2013

This security update addresses the vulnerabilities by correcting how Microsoft Excel and other affected Microsoft software validates data when parsing specially crafted Office files and by correcting how the XML parser used by Excel resolves external entities within a specially crafted...

Malware behind Microsoft Excel-based Sudoku generator

Sudoku is one such game that I believe will benefit your brain, but now not for your system. Peter Szabo from SophosLabs have identified a piece of malware that resides behind a Microsoft Excel-based Sudoku generator. The Malware developed in Visual Basic requires macros, a scripting language tha...

Microsoft Excel 'SerAuxErrBar'堆溢出远程代码执行漏洞(MS12-076)

BUGTRAQ ID: 56425 CVE ID: CVE-2012-1885 Excel是微软公司的办公软件的试算表软件组件。 Microsoft Excel 2003 SP3、2007 SP2/SP3、2010 SP1、Office 2008/2011 for Mac、Office Compatibility Pack SP2\SP3存在堆缓冲区溢出漏洞，通过特制的电子表格，可允许远程攻击者执行任意代码。 0 Microsoft Excel 2010 Microsoft Excel 2003 Microsoft Office Microsoft Office 2003 Profess...

Microsoft Excel Feature11/Feature12 Record Trusted Counter Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Excel's parsing ...

CVE-2012-2543

Stack-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Stack Overflow Vulnerability."...

CVE-2012-1887

Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SST Invalid Length Use After Free Vulnerability."...

CVE-2012-1885

Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SerAuxErrBar Heap Overflow Vulnerability."...

Heap overflow

Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SerAuxErrBar Heap Overflow Vulnerability."...

Memory corruption

Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted spreadsheet, aka "Excel Memory Corruption Vulnerability."...

Design/Logic Flaw

Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SST Invalid Length Use After Free Vulnerability."...

Stack overflow

Stack-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Stack Overflow Vulnerability."...

CVE-2012-1886

Summary: CVE-2012-1886 affects Microsoft Office Excel and related components. The vulnerability is triggered by a crafted spreadsheet that can cause memory corruption, enabling remote code execution or a denial of service. Affected products (as documented): Excel 2003 SP3; Excel 2007 SP2/SP3; Exc...