Microsoft Excel XLSM File Use-After-Free Information Disclosure Vulnerability

🗓️ 15 Apr 2020 00:00:00Reported by Zhihua Yao and Dexter LiType

zdi🔗 www.zerodayinitiative.com👁 28 Views

Microsoft Excel XLSM File Use-After-Free Information Disclosure Vulnerability. Remote attackers can exploit the handling of OLE streams in XLSM files to execute arbitrary code

Reporter	Title	Published	Views	Family All 32
Information Security Automation	Microsoft Patch Tuesday April 2020: my classification script, confusing RCE in Adobe Type Manager and updates for older vulnerabilities	26 Apr 202001:24	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Excel editors, Microsoft Office programs, and Office 365 ProPlus allows a hacker to execute arbitrary code in the context of the current user.	13 May 202000:00	–	bdu_fstec
Circl	CVE-2020-0906	15 Apr 202018:44	–	circl
CNVD	Microsoft Excel Remote Code Execution Vulnerability (CNVD-2020-24131)	16 Apr 202000:00	–	cnvd
CVE	CVE-2020-0906	15 Apr 202015:12	–	cve
Cvelist	CVE-2020-0906	15 Apr 202015:12	–	cvelist
Microsoft KB	Description of the security update for Office 2016: April 14, 2020	14 Apr 202007:00	–	mskb
Microsoft KB	Description of the security update for Office 2013: April 14, 2020	14 Apr 202007:00	–	mskb
Microsoft KB	Description of the security update for Office 2010: April 14, 2020	14 Apr 202007:00	–	mskb
Microsoft KB	Description of the security update for Excel 2016: April 14, 2020	14 Apr 202007:00	–	mskb