MS11-045: Vulnerabilities in Microsoft Excel could allow remote code execution: June 14, 2011

Resolves security vulnerabilities that exist in Microsoft Excel that could allow arbitrary code to run when a maliciously modified file is openedIntroductionMicrosoft has released security bulletin MS11-045. To view the complete security bulletin, visit one of the following Microsoft websites: Ho...

Microsoft Excel Array Out Of Bounds Access CVE-2011-1274 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability due to a boundary condition error. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the...

Microsoft Excel Heap Memory Corruption CVE-2011-1275 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability due to a memory-corruption error. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the...

Microsoft Improper Record Parsing CVE-2011-1273 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability due to a memory-corruption error. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the...

Microsoft Office Excel SELECTION Record Out Of Boundary (MS11-045; CVE-2011-1277)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability exists in the way that Microsoft Excel handles specially crafted Excel files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could...

Microsoft Office Excel Scenario Record Buffer Overflow (MS11-045; CVE-2011-1275)

Microsoft Excel is a popular spreadsheet application. This is a remote code execution vulnerability. When Microsoft Excel validates record information upon opening a specially crafted Excel file, a memory handling error may corrupt system memory in such a way that an attacker could execute...

Microsoft Excel SLK File Parsing Code Execution (MS11-045; CVE-2011-1276)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the SLK file format. A remote attacker could trigger this flaw by...

Microsoft XML Editor Crafted Entity Information Disclosure (MS11-049; CVE-2011-1280)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the SLK file format. A remote attacker could trigger this flaw by...

FreeBSD : linux-flashplugin -- multiple vulnerabilities (d226626c-857f-11e0-95cc-001b2134ef46)

Adobe Product Security Incident Response Team reports : Critical vulnerabilities have been identified in Adobe Flash Player 10.2.159.1 and earlier versions Adobe Flash Player 10.2.154.28 and earlier for Chrome users for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 10.2.157.51 and...

Critical Flash Player Update to fix 11 Security Holes

Critical Flash Player Update to fix 11 Security Holes Adobe has released another batch of security updates for its ubiquitous Flash Playersoftware. This "critical" patch fixes at least 11 vulnerabilities, including one that reports suggest is being exploited in targeted email attacks. In the...

Microsoft Excel Axis属性远程代码执行漏洞

微软Excel中很容易出现一个远程代码执行漏洞，因为没有足够的应用程序验证用户提供的输入。 攻击者可以利用通过诱使不知情的用户打开特制的Excel文件这个问题。 成功的攻击可以让攻击者执行与正在运行的应用程序用户的权限执行任意代码。无法利用企图将导致拒绝服务条件。 Microsoft Excel 2010 0 Microsoft Excel 2007 SP2 Microsoft Excel 2007 SP1 Microsoft Excel 2007 0 Microsoft Excel 2003 SP3 Microsoft Excel 2003 SP2 Microsoft Excel 20...

Microsoft Excel - Axis Properties Record Parsing Buffer Overflow (PoC) (MS11-02)

Microsoft Excel - Axis Properties Record Parsing Buffer Overflow PoC MS11-02 """ This is a PoC for MS11-021/CVE-2011-0978 Microsoft Office Excel Axis Properties Record Parsing Buffer Overflow w3bd3vilatgmaildot.com twitter.com/w3bd3vil Modify bits at file location 0x39E7 0:000:x86 r eax=04dd6380...

Microsoft Excel - Axis Properties Record Parsing Buffer Overflow (PoC) (MS11-02)

""" This is a PoC for MS11-021/CVE-2011-0978 Microsoft Office Excel Axis Properties Record Parsing Buffer Overflow w3bd3vilatgmaildot.com twitter.com/w3bd3vil Modify bits at file location 0x39E7 0:000:x86 r eax=04dd6380 ebx=ffff5554 ecx=04ab5108 edx=00000000 esi=04ab4800 edi=ffff5554 eip=2f36a2fd...

FreeBSD : linux-flashplugin -- remote code execution vulnerability (32b05547-6913-11e0-bdc4-001b2134ef46)

Adobe Product Security Incident Response Team reports : A critical vulnerability exists in Flash Player 10.2.153.1 and earlier versions Adobe Flash Player 10.2.154.25 and earlier for Chrome users for Windows, Macintosh, Linux and Solaris, Adobe Flash Player 10.2.156.12 and earlier versions for...

Microsoft Excel缓冲区分配整数溢出远程代码执行漏洞(MS11-021)

BUGTRAQ ID: 47201 CVE ID: CVE-2011-0097 Microsoft Excel是由Microsoft为Windows和Apple Macintosh操作系统的电脑而编写和运行的一款电子表格软件。 Microsoft Excel在实现上存在缓冲区分配整数溢出远程代码执行漏洞，远程攻击者可利用此漏洞以当前用户权限执行任意代码或造成拒绝服务。 Microsoft Office Excel处理特制Excel文件的方式中存在一个远程执行代码漏洞。成功利用此漏洞的攻击者便可完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐...

Microsoft Excel堆缓冲区溢出漏洞(MS11-021)

BUGTRAQ ID: 47235 CVE ID: CVE-2011-0098 Microsoft Excel是由Microsoft为Windows和Apple Macintosh操作系统的电脑而编写和运行的一款试算表软件。 Microsoft Excel在实现上存在堆缓冲区溢出漏洞，远程攻击者可利用此漏洞以当前用户权限执行任意代码，造成拒绝服务。 Microsoft Office Excel处理特制Excel文件的方式中存在一个远程执行代码漏洞。成功利用此漏洞的攻击者便可完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户 Microsof...

Microsoft Excel "RealTimeData"记录解析远程代码执行漏洞(MS11-021)

BUGTRAQ ID: 47243 CVE ID: CVE-2011-0101 Microsoft Excel是由Microsoft为Windows和Apple Macintosh操作系统的电脑而编写和运行的一款试算表软件。 Microsoft Excel "RealTimeData"在实现上存在记录解析远程代码执行漏洞，远程攻击者可利用此漏洞以当前用户权限执行任意代码，造成拒绝服务。 Microsoft Office...

Microsoft Excel Office Art远程代码执行漏洞(MS11-021)

BUGTRAQ ID: 47226 CVE ID: CVE-2011-0979 Microsoft Excel是由Microsoft为Windows和Apple Macintosh操作系统的电脑而编写和运行的一款试算表软件。 Microsoft Excel在实现上存在缓冲区溢出漏洞，远程攻击者可利用此漏洞以当前用户权限执行任意代码，造成拒绝服务。 Microsoft Office Excel处理特制Excel文件的方式中存在一个远程执行代码漏洞，成功利用此漏洞的攻击者便可完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户 Microsoft...

Microsoft Excel图层悬空指针远程代码执行漏洞(MS11-023)

BUGTRAQ ID: 46227 CVE ID: CVE-2011-0977 Microsoft Excel是由Microsoft为Windows和Apple Macintosh操作系统的电脑而编写和运行的一款试算表软件。 Microsoft Excel在实现上存在会话层悬空指针远程代码执行漏洞，远程攻击者可利用此漏洞以当前用户权限执行任意代码，造成拒绝服务。 在解析特制Office文件时，Microsoft...

CVE-2011-0105

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data...