VulnCheck KEV: CVE-2009-1136

The Microsoft Office Web Components Spreadsheet ActiveX control aka OWC10 or OWC11, as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and...

Microsoft Office Spreadsheet ActiveX控件内存破坏漏洞

BUGTRAQ ID: 35642 CVECAN ID: CVE-2009-1136 Microsoft Office是非常流行的办公软件套件。 Office Web组件是用于向Web发布电子表格、图表和数据库的COM控件，其中的Spreadsheet ActiveX控件（OWC 10和OWC11）存在内存破坏漏洞。如果用户受骗访问了恶意恶意网页并向该控件，就会导致执行任意指令。 目前这个漏洞正在被挂马攻击广为利用。 Microsoft ISA Server 2006 SP1 Microsoft ISA Server 2006 Microsoft ISA Server 2004 SP3...

New Flaw in Microsoft Office Web Components Under Attack

From SearchSecurity Robert Westervelt Microsoft issued an advisory Monday, warning of a new vulnerability in Office Web Components being actively targeted by attackers. The Office Web Components allow users to view spreadsheets, charts and databases on the Web. Microsoft said the vulnerability is...