CVE-2012-2543

Stack-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Stack Overflow Vulnerability."...

Design/Logic Flaw

Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SST Invalid Length Use After Free Vulnerability."...

Stack overflow

Stack-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Stack Overflow Vulnerability."...

Heap overflow

Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SerAuxErrBar Heap Overflow Vulnerability."...

Memory corruption

Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted spreadsheet, aka "Excel Memory Corruption Vulnerability."...

CVE-2012-1886

Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted spreadsheet, aka "Excel Memory Corruption Vulnerability."...

CVE-2012-1886

Summary: CVE-2012-1886 affects Microsoft Office Excel and related components. The vulnerability is triggered by a crafted spreadsheet that can cause memory corruption, enabling remote code execution or a denial of service. Affected products (as documented): Excel 2003 SP3; Excel 2007 SP2/SP3; Exc...

CVE-2012-1885

Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SerAuxErrBar Heap Overflow Vulnerability."...

CVE-2012-1887

CVE-2012-1887 is a use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2/SP3, 2010 SP1, and Office for Mac 2008/2011, exploitable via a crafted spreadsheet to achieve remote code execution. The underlying issue is a use-after-free in handling an Excel SST Invalid Length condition. Af...

CVE-2012-1887

Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SST Invalid Length Use After Free Vulnerability."...

CVE-2012-2543

CVE-2012-2543 is a stack-based buffer overflow in Microsoft Excel components (Windows: Excel 2007 SP2/SP3, Excel 2010 SP1; Mac: Office 2011; Excel Viewer; Office Compatibility Pack SP2/SP3). The vulnerability arises while handling crafted spreadsheets, enabling remote code execution. Connected so...

CVE-2012-1885: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SerAuxErrBar Heap Overflow Vulnerability."...

CVE-2012-1886: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted spreadsheet, aka "Excel Memory Corruption Vulnerability."...

CVE-2012-2543: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Stack Overflow Vulnerability."...

CVE-2012-1887: Undefined Security Weakness

Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SST Invalid Length Use After Free Vulnerability."...

MS12-076: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2720184) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Excel that is affected by the following vulnerabilities : - A heap-based buffer overflow vulnerability exists due to the way the application handles memory when opening Excel files. CVE-2012-1885 - A memory corruption vulnerability exists...

Microsoft Office Remote Code Execution Vulnerabilities (2720184)

This host is missing an important security update according to Microsoft Bulletin MS12-076. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS12-076: Vulnerabilities in Microsoft Excel could allow remote code execution: November 13, 2012

Fixes the vulnerabilities in Microsoft Excel that could allow remote code execution, that was released on November 13, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-076. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

Microsoft Excel SST Invalid Length Use After Free Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running...

PT-2012-3626

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2003 SP3, 2007 SP2 and SP3, and 2010 SP1 Office versions 2008 and 2011 for Mac Description A use-after-free issue allows remote attackers to execute arbitrary code via a crafted spreadsheet. This is a remote code...