Secunia Advisory: SA28506
Release Date: 2008-01-16
Critical: Extremely critical
Impact: System access
Where: From remote
Solution Status: Unpatched
Software:
Microsoft Excel 2000
Microsoft Excel 2002
Microsoft Excel 2003
Microsoft Excel Viewer 2003
Microsoft Office 2000
Microsoft Office 2003 Professional Edition
Microsoft Office 2003 Small Business Edition
Microsoft Office 2003 Standard Edition
Microsoft Office 2003 Student and Teacher Edition
Microsoft Office 2004 for Mac
CVE reference: CVE-2008-0081 (Secunia mirror)
Description:
A vulnerability has been reported in Microsoft Excel, which can be exploited by malicious people to compromise a user's system.
The vulnerability is caused due to an unspecified error in the handling of Excel files and can be exploited via a specially crafted Excel file with malformed header information.
Successful exploitation allows execution of arbitrary code but requires that the user is tricked into opening a malicious Excel file.
NOTE: According to Microsoft, this is currently being actively exploited.
The vulnerability is reported in the following versions:
* Microsoft Office Excel 2003 Service Pack 2
* Microsoft Office Excel Viewer 2003
* Microsoft Office Excel 2002
* Microsoft Office Excel 2000
* Microsoft Excel 2004 for Mac.
Solution:
Do not open untrusted Excel files.
Bollettino di Sicurezza
Release Date: 2008-01-16
Critical: Extremely critical
Impact: System access
Where: From remote
Solution Status: Unpatched
Software:
Microsoft Excel 2000
Microsoft Excel 2002
Microsoft Excel 2003
Microsoft Excel Viewer 2003
Microsoft Office 2000
Microsoft Office 2003 Professional Edition
Microsoft Office 2003 Small Business Edition
Microsoft Office 2003 Standard Edition
Microsoft Office 2003 Student and Teacher Edition
Microsoft Office 2004 for Mac
CVE reference: CVE-2008-0081 (Secunia mirror)
Description:
A vulnerability has been reported in Microsoft Excel, which can be exploited by malicious people to compromise a user's system.
The vulnerability is caused due to an unspecified error in the handling of Excel files and can be exploited via a specially crafted Excel file with malformed header information.
Successful exploitation allows execution of arbitrary code but requires that the user is tricked into opening a malicious Excel file.
NOTE: According to Microsoft, this is currently being actively exploited.
The vulnerability is reported in the following versions:
* Microsoft Office Excel 2003 Service Pack 2
* Microsoft Office Excel Viewer 2003
* Microsoft Office Excel 2002
* Microsoft Office Excel 2000
* Microsoft Excel 2004 for Mac.
Solution:
Do not open untrusted Excel files.
Bollettino di Sicurezza