Memory corruption

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted AutoFilter filter record in an Excel BIFF8 format XLS file, which triggers memory corruption...

Stack overflow

Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a .XLS BIFF file with a malformed Named Graph record, which results in memory corruption...

Null pointer dereference

Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service application crash via a file with a 1 corrupted XML format or a 2 corrupted XLS format, which triggers a NULL pointer dereference...

CVE-2007-1239

Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service application crash via a file with a 1 corrupted XML format or a 2 corrupted XLS format, which triggers a NULL pointer dereference...

Microsoft Excel畸形字符串远程代码执行漏洞(MS07-015)

Microsoft Excel是非常流行的电子表格处理办公软件。 Microsoft Excel处理畸形文件格式时存在漏洞，远程攻击者可能利用此漏洞通过诱骗用户打开恶意文件控制用户机器。 如果用户受骗打开了恶意的Excel文件的话，就可能导致执行任意代码。目前这个漏洞正在被名为Exploit-MSExcel.h的木马积极地利用。在打开畸形的XLS文件时会执行以下操作： 在内存中解压异或加密的shellcode 对于Windows XP Service Pack 2，使用硬编码的地址加载KERNEL32.DLL；对于其他Windows版本，Excel会崩溃...

Microsoft Office Excel 2003 XLS File Denial Of Service

Microsoft Office Excel 2003 XLS File Denial Of Service Программа "Microsoft Office Excel 2003" вызывает ошибку при обработке файлов формата XLS Протестированно: Microsoft Office Excel 2003 11.6560.8122 SP2 Windows XP SP2 разные результаты можно получить при изменении последних 3 байт в файле...

Microsoft Office Excel 2003 XLS File Denial Of Service

Microsoft Office Excel 2003 XLS File Denial Of Service В программе "Microsoft Office Excel 2003" компонент "DW20.EXE" вызывает ошибку при обработке файлов формата XLS Протестированно: Microsoft Office Excel 2003 11.6560.6568 SP2 Windows XP SP2 file "example.xls": ---begin--- MIME-Version: 1.0...

CVE-2007-0028

Microsoft Excel 2000, 2002, 2003, Viewer 2003, Office 2004 for Mac, and Office v.X for Mac does not properly handle certain opcodes, which allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file, which results in an "Improper Memory Access Vulnerability." NOTE: an...

Detection of .xls File Email Attachment

Binary data 3870.prm...

Microsoft Excel畸形命名区域内存破坏漏洞（MS06-012）

Microsoft Excel是Office产品套件中的电子表格和分析程序。 Microsoft Excel中存在安全漏洞，攻击者可能利用此漏洞在机器上执行指令。 如果能够通过Excel .xls文件的数据字段向"msvcrt.memmove"传送很大的值的话，就可能导致内存破坏，执行任意代码。 Microsoft Office XP SP3 Microsoft Office X for Mac Microsoft Office 2004 for Mac Microsoft Office 2003 Service Pack 2 Microsoft Office 2003 Service...

CVE-2006-2387

Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004 through 2006 allows user-assisted attackers to execute arbitrary code via a crafted DATETIME record in an XLS file, a different vulnerability than...

CVE-2006-2387

Microsoft Excel contains a remote-code-execution vulnerability CVE-2006-2387 in the parsing of a malformed DATETIME record within XLS files. Affected products include Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004–2006. The root cause is insuf...

CVE-2006-2387

Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004 through 2006 allows user-assisted attackers to execute arbitrary code via a crafted DATETIME record in an XLS file, a different vulnerability than...

CVE-2006-3875

Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a crafted COLINFO record in an XLS file, a different vulnerability than CVE-2006-2387 and CVE-2006-3867...

CVE-2006-3875

CVE-2006-3875 : A remote code execution vulnerability in Microsoft Excel arises when parsing COLINFO records in XLS files. The COLINFO record parsing flaw can be exploited by a crafted Excel file to execute arbitrary code in the caller’s security context. Affected products include Microsoft Excel...

CVE-2006-1308

Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted FNGROUPCOUNT value...

Memory corruption

Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted SELECTION record that triggers memory corruption, a different vulnerability than CVE-2006-1302...

CVE-2006-1301

Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted SELECTION record that triggers memory corruption, a different vulnerability than CVE-2006-1302...

CVE-2006-1309

CVE-2006-1309 is a Microsoft Excel vulnerability affecting Excel 2000–2004 where opening a crafted .xls file with a malformed LABEL record can trigger memory corruption and allow remote code execution. The underlying issue is memory corruption during processing of the LABEL record, potentially en...

CVE-2006-1309

Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted LABEL record that triggers memory corruption...