Microsoft Office Excel畸形文件格式解析远程代码执行漏洞（MS06-012）

Microsoft Office Excel是非常流行的电子表格办公软件。 Microsoft Office Excel在处理Excel文档中畸形解析格式时存在漏洞，攻击者可能利用此漏洞在客户机器上执行任意代码。 使用畸形解析格式文件的Excel中存在一个远程执行代码漏洞。攻击者可以通过构建特制的Excel文件来利用此漏洞，可能允许远程执行代码。 Microsoft Office XP SP3 Microsoft Office X for Mac Microsoft Office 2004 for Mac Microsoft Office 2003 Service Pack 2...

Microsoft Office Excel畸形记录远程代码执行漏洞（MS06-012）

Microsoft Office Excel是非常流行的电子表格办公软件。 Microsoft Office Excel在处理畸形Excel文档时存在漏洞，攻击者可能利用此漏洞在用户机器上执行任意代码。 使用畸形记录的Excel中存在一个远程执行代码漏洞。攻击者可以通过构建特制的Excel文件来利用此漏洞，可能允许远程执行代码。 Excel在打开“.xls”文件时会以0x0e0e0e0e初始化栈缓冲区，但使用的用户提供长度会导致栈溢出。以下代码源于excel v9.0.0.8924： .text:3003FE0C movzx eax, word ptr ebx .text:3003FE0...

Microsoft Excel畸形命名区域内存破坏漏洞（MS06-012）

Microsoft Excel是Office产品套件中的电子表格和分析程序。 Microsoft Excel中存在安全漏洞，攻击者可能利用此漏洞在机器上执行指令。 如果能够通过Excel .xls文件的数据字段向"msvcrt.memmove"传送很大的值的话，就可能导致内存破坏，执行任意代码。 Microsoft Office XP SP3 Microsoft Office X for Mac Microsoft Office 2004 for Mac Microsoft Office 2003 Service Pack 2 Microsoft Office 2003 Service...

Microsoft Office畸形传送名单远程代码执行漏洞（MS06-012）

Microsoft Office是非常流行的办公软件。 Microsoft Office在处理Office文档时存在漏洞，成功利用此漏洞的攻击者可以完全控制受影响的系统。 攻击者可以通过在Office文档内构建特制的传送名单来利用此漏洞，可能允许远程执行代码。 Microsoft Office XP SP3 Microsoft Office X for Mac Microsoft Office 2004 for Mac Microsoft Office 2003 Service Pack 2 Microsoft Office 2003 Service Pack 1 Microsoft...

Microsoft Office Excel畸形公式大小栈溢出漏洞（MS06-012）

Microsoft Office Excel是非常流行的电子表格办公软件。 Microsoft Office Excel在处理Excel文档中的畸形描述时存在漏洞，攻击者可能利用此漏洞在客户机器上执行任意代码。 Microsoft Excel对opcode 0x0218的管理存在栈溢出漏洞。如果提供了特别大的公式大小，攻击者就可以触发此漏洞，可能允许远程执行代码。 Microsoft Office XP SP3 Microsoft Office X for Mac Microsoft Office 2004 for Mac Microsoft Office 2003 Service Pa...

CVE-2006-5404

CVE-2006-5404 involves an unspecified vulnerability in an ActiveX control used by the Symantec Automated Support Assistant, deployed in Norton AntiVirus, Internet Security, and System Works 2005/2006. The vulnerability allows user‑assisted remote attackers to obtain sensitive information via unsp...

Microsoft Security Bulletin MS06-059 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (924164)

Microsoft Security Bulletin MS06-059 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution 924164 Published: October 10, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Excel Impact of Vulnerability: Remote Code Execution Maximum Severity Rating...

ZDI-06-033: Microsoft Office Excel File Format DATETIME Record Parsing Vulnerability

ZDI-06-033: Microsoft Office Excel File Format DATETIME Record Parsing Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-033.html October 10, 2006 -- CVE ID: CVE-2006-2387 -- Affected Vendor: Microsoft -- Affected Products: Microsoft Office 2000 SP3 Microsoft Office XP SP3 Microsof...

CVE-2006-2387

Microsoft Excel contains a remote-code-execution vulnerability CVE-2006-2387 in the parsing of a malformed DATETIME record within XLS files. Affected products include Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004–2006. The root cause is insuf...

Microsoft Word Malformed String Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to load a malicious Word file. If the vulnerability is successfully exploited, this could result in the execution of arbitrary code in the context of the current...

CVE-2006-3649

Buffer overflow in Microsoft Visual Basic for Applications VBA SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, Project 2000 SR1, Project 2002 SP1, Access 2000 Runtime SP3, Visio 2002 SP2, and Works Suite 2004 through 2006, allows user-assisted attackers to execute...

Microsoft Security Bulletin MS06-047 Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution (921645)

Microsoft Security Bulletin MS06-047 Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution 921645 Published: August 8, 2006 Version: 1.0 Summary Who Should Read this Document: Customers using Microsoft Office applications or applications that use Microsoft...

VulnCheck KEV: CVE-2006-3649

Buffer overflow in Microsoft Visual Basic for Applications VBA SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, Project 2000 SR1, Project 2002 SP1, Access 2000 Runtime SP3, Visio 2002 SP2, and Works Suite 2004 through 2006, allows user-assisted attackers to execute...

CVE-2006-3654

Buffer overflow in wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service CPU consumption or crash via crafted Excel files...

CVE-2006-3653

wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service CPU consumption or crash via crafted 1 Works, 2 Excel, and 3 Lotus 1-2-3 files...

CVE-2006-3654

Buffer overflow in wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service CPU consumption or crash via crafted Excel files...

CVE-2006-3653

wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service CPU consumption or crash via crafted 1 Works, 2 Excel, and 3 Lotus 1-2-3 files...

CVE-2006-3654

The CVE-2006-3654 entry affects Microsoft Works Spreadsheet 8.0 (wksss.exe 8.4.702.0). The underlying issue is a buffer overflow triggered by crafted Excel files, enabling remote attackers to cause a denial of service (CPU consumption or crash). No patch/fix details are provided in the connected ...

CVE-2006-3653

CVE-2006-3653 affects wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0. A remote attacker can cause a denial of service by processing crafted (1) Works, (2) Excel, and (3) Lotus 1-2-3 files. Impact stated: CPU consumption or crash, with a low base score (CVSS v2: 2.6) and partial availabili...

Microsoft Works - Buffer Overflows / Denial of Service (DoS)-Vulnerabilities

Microsoft Works - Buffer Overflows / Denial of Service DoS-Vulnerabilities ... discovered by Benjamin Tobias Franz Affected Vendor: Microsoft Affected Product: Microsoft Works Description: Microsoft Works Spreadsheet wksss.exe fails to handle specially crafted files. All supported file formats...