فا

‫ Microsoft Office Excel Multiple Vulnerabilities

IRCAD2011061246
ID:IRCAD2011061246
Release Date: 2011-06-14
Criticality level: Highly critical
Software:
Microsoft Excel 2002
Microsoft Excel 2003
Microsoft Office 2003 Professional Edition
Microsoft Office 2003 Small Business Edition
Microsoft Office 2003 Standard Edition
Microsoft Office 2003 Student and Teacher Edition
Microsoft Office 2004 for Mac
Microsoft Office 2007
Microsoft Office 2008 for Mac
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats
Microsoft Office Excel 2007
Microsoft Office Excel Viewer 2007
Microsoft Office XP
Microsoft Open XML File Format Converter for Mac
Description:
Multiple vulnerabilities have been reported in Microsoft Office Excel, which can be exploited by malicious people to compromise a user's system.
1) An input validation error when parsing certain record structures can be exploited to corrupt memory.
2) An unspecified error when validating certain record information can be exploited to corrupt memory.
3) An unspecified error when validating certain record information can be exploited to access data outside the bounds of an array and corrupt memory.
4) An unspecified error when validating certain record information can be exploited to overwrite heap memory.
5) An unspecified error when validating certain record information can be exploited to cause a buffer overflow.
6) An unspecified error when validating certain record information can be exploited to corrupt memory.
7) An unspecified error when validating certain record information can be exploited to corrupt memory.
8) An unspecified error when validating certain record information can be exploited to corrupt memory.
Successful exploitation allows execution of arbitrary code via specially crafted Excel files.
Solution:
Apply patches.
References:
MS11-045 (KB2537146, KB2541003, KB2541025, KB2541007, KB2555786, KB2555785, KB2555787, KB2541015, KB2541012):
Secunia:

نظرات

بدون نظر
شما برای نظر دادن باید وارد شوید

نوشته

 
تاریخ ایجاد: 25 بهمن 1390

امتیاز

امتیاز شما
تعداد امتیازها: 0