Microsoft Office Excel Multiple Vulnerabilities( 09 June 2010 )

1. Excel Record Parsing Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that Microsoft Office Excel handles specially crafted Excel files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

2. Excel Object Stack Overflow Vulnerability

3. Excel Memory Corruption Vulnerability

4. Excel Record Memory Corruption Vulnerability

5. Excel Record Memory Corruption Vulnerability

6. Excel RTD Memory Corruption Vulnerability

7. Excel Memory Corruption Vulnerability

8. Excel HFPicture Memory Corruption Vulnerability

9. Excel Memory Corruption Vulnerability

10. Excel EDG Memory Corruption Vulnerability

11. Excel Record Stack Corruption Vulnerability

12. Excel String Variable Vulnerability

13. Excel ADO Object Vulnerability

14. Mac Office Open XML Permissions Vulnerability

An elevation of privilege vulnerability exists in the way that the Open XML File Format Converter for Mac installs itself. During installation, the Open XML File Format Converter for Mac changes the file system ACLs on the /Applications folder in a way that reduces the security settings on the /Applications folder and allows all access to the files in this folder. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could replace the Open XML File Format Converter for Mac with a malicious executable. When an administrator later logs on and runs the Open XML File Format Converter for Mac, the attacker-provided code can be made to execute, allowing the attacker to take complete control over an affected system.