Skip to main content

Microsoft Office Multiple Memory Corruption Vulnerabilities( 12 March 2008 )

Last Update Date: 28 Jan 2011 Release Date: 12 Mar 2008 4557 Views

RISK: Medium Risk

1. Microsoft Office Cell Parsing Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way Microsoft Office handles specially crafted Excel files. An attacker could exploit the vulnerability by creating a malformed file which could be included as an e-mail attachment, or hosted on a specially crafted or compromised Web site.

2. Microsoft Office Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way Microsoft Office processes malformed Office files. An attacker could exploit the vulnerability by creating a malformed Office file which could be included as an e-mail attachment, or hosted on a specially crafted or compromised Web site.


Impact

  • Remote Code Execution

System / Technologies affected

  • Microsoft Office 2000 Service Pack 3
  • Microsoft Office XP Service Pack 3
  • Microsoft Office 2003 Service Pack 2
  • Microsoft Office Excel Viewer 2003
  • Microsoft Office Excel Viewer 2003 Service Pack 3
  • Microsoft Office 2004 for Mac

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Download locations for this patch


Vulnerability Identifier


Source


Related Link