Microsoft Excel Named Graph record buffer overflow

Added: 05/24/2007 CVE: CVE-2007-0215 BID: 23760 OSVDB: 34393 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows platforms. Problem A buffer overflow vulnerability in Microsoft Excel allows command execution when a user opens a speciall...

Microsoft Excel Named Graph record buffer overflow

Added: 05/24/2007 CVE: CVE-2007-0215 BID: 23760 OSVDB: 34393 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows platforms. Problem A buffer overflow vulnerability in Microsoft Excel allows command execution when a user opens a speciall...

Microsoft Excel BIFF记录远程栈溢出漏洞（MS07-023）

Microsoft Excel是Office套件中的电子表格工具。 Excel在解析BIFF文件格式时存在栈溢出漏洞，在处理畸形的Named Graph记录时可能未经检查便将用户提供的数据拷贝到了栈中，触发这个溢出，导致在用户系统上执行任意指令。 Microsoft Excel Viewer 2003 Microsoft Excel 2003 SP2 Microsoft Excel 2002 SP3 Microsoft Excel 2000 SP3 临时解决方法： 不要打开不可信任来源的Excel文档。 厂商补丁： Microsoft ---------...

Microsoft Excel畸形set font值远程代码执行漏洞（MS07-023）

Microsoft Excel是Office套件中的电子表格工具。 Excel在处理文件中的畸形set font值时存在漏洞，远程攻击者可能利用此漏洞通过诱使用户打开恶意文档来控制用户机器。 此类文件可能包括在电子邮件附件中或宿主在恶意网站上。如果用户受骗打开了特制的Excel文件的话，就可能触发内存破坏，导致执行任意指令。 Microsoft Excel Viewer 2003 Microsoft Excel 2007 Microsoft Excel 2003 SP2 Microsoft Excel 2002 SP3 Microsoft Excel 2000 SP3 Microsoft...

Microsoft Excel Filter记录远程代码执行漏洞（MS07-023）

Microsoft Excel是Office套件中的电子表格工具。 Excel在处理Excel BIFF8格式电子表格文件中的AutoFilter记录时存在输入验证错误，如果用户受骗打开了包含有畸形过滤记录的特制文档的话，就可能导致无效的内存访问，在用户系统上执行任意代码。 Microsoft Excel Viewer 2003 Microsoft Excel 2003 SP2 Microsoft Excel 2002 SP3 Microsoft Excel 2000 SP3 Microsoft Office 2004 for Mac 临时解决方法： 不要打开不可信任来源的Excel文档...

iDefense Security Advisory 05.08.07: Microsoft Excel Filter Record Code Execution Vulnerability

Microsoft Excel Filter Record Code Execution Vulnerability iDefense Security Advisory 05.08.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 08, 2007 I. BACKGROUND Microsoft Excel is the spreadsheet application from the Microsoft Office System. More information is available at the...

Microsoft Excel multiple security vulneraiblities

Multiple memory corruptions on different record types handling...

CVE-2007-0215

Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a .XLS BIFF file with a malformed Named Graph record, which results in memory corruption...

CVE-2007-0215

CVE-2007-0215 is a stack-based buffer overflow in Microsoft Excel that occurs while processing a Named Graph record in .XLS BIFF files. The vulnerability affects Excel 2000 SP3, 2002 SP3, 2003 SP2, and Excel 2003 Viewer, and is exploitable via a crafted Excel file opened by a user, leading to mem...

CVE-2007-1214

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted AutoFilter filter record in an Excel BIFF8 format XLS file, which triggers memory corruption...

CVE-2007-1203

Unspecified vulnerability in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via a crafted set font value in an Excel file, which results in memory corruption...

Stack overflow

Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a .XLS BIFF file with a malformed Named Graph record, which results in memory corruption...

CVE-2007-0215

Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a .XLS BIFF file with a malformed Named Graph record, which results in memory corruption...

CVE-2007-1214

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted AutoFilter filter record in an Excel BIFF8 format XLS file, which triggers memory corruption...

CVE-2007-1214

The CVE-2007-1214 issue affects Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac. It is a memory corruption/remote code execution vulnerability in the handling of Excel BIFF8 AutoFilter records; a crafted XLS file can trigger the flaw. Attack vector involves a user-open...

CVE-2007-1203

CVE-2007-1203 is a remote code execution vulnerability in Microsoft Excel where specially crafted set font values in Excel files can cause memory corruption. Affected products include Excel 2000 (SP3), 2002 (SP3), 2003 (SP2), 2003 Viewer, and 2004 for Mac, plus Excel 2007. The root cause involves...

ZDI-07-026: Microsoft Excel BIFF File Format Named Graph Record Parsing Stack Overflow Vulnerability

ZDI-07-026: Microsoft Excel BIFF File Format Named Graph Record Parsing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-026.html May 8, 2007 -- CVE ID: CVE-2007-0215 -- Affected Vendor: Microsoft -- Affected Products: Office Excel 2000 Office Excel 2002 Office Exce...

Microsoft Excel Filter Records Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of a victim user running the application. A successful exploit will result in the compromise of the application and may aid in further attacks...

Microsoft Security Bulletin MS07-025 Vulnerability in Microsoft Office Could Allow Remote Code Execution (934873)

Microsoft Security Bulletin MS07-025 Vulnerability in Microsoft Office Could Allow Remote Code Execution 934873 Published: May 8, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Office Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...

Microsoft Excel fails to properly process files with crafted filter records

Overview A vulnerability in Microsoft Excel could allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft Excel fails to validate certain filter records contained in Excel documents. This flaw results in an unspecified memory corruption vulnerability that...