CVE-2013-3158

CVE-2013-3158 affects Microsoft Excel 2003 SP3 and 2007 SP3, where memory corruption in parsing crafted Office documents can lead to remote code execution or denial of service. Root cause is memory corruption within Excel’s handling of Office file content. Exploitation details are not provided in...

PT-2013-4189

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2003 SP3, 2007 SP3, and 2010 SP1 and SP2 Excel Viewer Microsoft Office Compatibility Pack version SP3 Description An issue exists in the way Microsoft Excel parses specially crafted XML files, allowing remote attackers...

MS13-073: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2858300))

The remote Windows host is running a version of Microsoft Excel that is affected by the following vulnerabilities : - Two memory corruption vulnerabilities exist due to the way the application handles objects in memory when parsing Office files. CVE-2013-1315 / CVE-2013-3158 - An information...

Microsoft Office Excel Remote Code Execution Vulnerabilities (2858300)

This host is missing an important security update according to Microsoft Bulletin MS13-073. OpenVAS Vulnerability Test $Id: secpodmsexcelms13-073.nasl 6104 2017-05-11 09:03:48Z teissa $ Microsoft Office Excel Remote Code Execution Vulnerabilities 2858300 Authors: Antu Sanadi Copyright: Copyright ...

PT-2013-4188

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2003 SP3 through 2007 SP3 Description A remote code execution issue exists in the way Microsoft Excel parses content in Excel files, potentially allowing an attacker to execute arbitrary code or cause a denial of servi...

CVE-2013-3159: Improper Input Validation

Microsoft Excel 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Excel Viewer; and Microsoft Office Compatibility Pack SP3 allow remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Enti...

CVE-2013-3158: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

MS13-073: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2858300) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Excel that is affected by the following vulnerabilities : - Two memory corruption vulnerabilities exist due to the way the application handles objects in memory when parsing Office files. CVE-2013-1315 / CVE-2013-3158 - An information...

Microsoft Excel CVE-2013-1315 Memory Corruption Vulnerability

Description Microsoft Excel is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Excel 2003 SP3 Microsoft...

Microsoft Excel Memory Corruption (MS13-067; CVE-2013-1315)

A remote code execution vulnerability exists in the way that Microsoft Excel parses content in Excel files...

Microsoft Excel CVE-2013-3158 Memory Corruption Vulnerability

Description Microsoft Excel is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Excel 2003 SP3 Microsoft...

Microsoft Excel Read Access Violation Remote Code Execution (MS13-073; CVE-2013-3158)

A remote code execution vulnerability has been reported in Microsoft Excel...

Microsoft Excel CVE-2013-3159 XML Files Handling Information Disclosure Vulnerability

Description Microsoft Excel is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Excel 2003 SP3 Microsoft Excel 2007 SP3 Microsoft Excel 2010 SP1 32-bit editions...

MS13-073: Vulnerabilities in Microsoft Excel could allow remote code execution: September 10, 2013

This security update addresses the vulnerabilities by correcting how Microsoft Excel and other affected Microsoft software validates data when parsing specially crafted Office files and by correcting how the XML parser used by Excel resolves external entities within a specially crafted...

MS13-073: Description of the security update for Microsoft Excel 2013: September 10, 2013

This security update addresses the vulnerabilities by correcting how Microsoft Excel and other affected Microsoft software validates data when parsing specially crafted Office files and by correcting the manner in which the XML parser used by Excel resolves external entities within a specially...

Malware behind Microsoft Excel-based Sudoku generator

Sudoku is one such game that I believe will benefit your brain, but now not for your system. Peter Szabo from SophosLabs have identified a piece of malware that resides behind a Microsoft Excel-based Sudoku generator. The Malware developed in Visual Basic requires macros, a scripting language tha...

Microsoft Excel 'SerAuxErrBar'堆溢出远程代码执行漏洞(MS12-076)

BUGTRAQ ID: 56425 CVE ID: CVE-2012-1885 Excel是微软公司的办公软件的试算表软件组件。 Microsoft Excel 2003 SP3、2007 SP2/SP3、2010 SP1、Office 2008/2011 for Mac、Office Compatibility Pack SP2\SP3存在堆缓冲区溢出漏洞，通过特制的电子表格，可允许远程攻击者执行任意代码。 0 Microsoft Excel 2010 Microsoft Excel 2003 Microsoft Office Microsoft Office 2003 Profess...

Microsoft Excel Feature11/Feature12 Record Trusted Counter Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Excel's parsing ...

CVE-2012-1885

Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SerAuxErrBar Heap Overflow Vulnerability."...

CVE-2012-1887

Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SST Invalid Length Use After Free Vulnerability."...