PT-2004-1908 · Microsoft · Office Excel

Brett Moore · Publicado 2004-10-16 · Atualizado 2018-10-12 · CVE-2004-0846

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions 2000, 2001, 2002, and v.X for Mac

Description: A remote code execution issue exists due to improper validation of certain parameters in malicious files. This allows attackers to execute arbitrary code.

Recommendations: For Microsoft Excel 2000, consider applying security patches or updates to fix the issue. For Microsoft Excel 2001, apply security patches or updates to resolve the problem. For Microsoft Excel 2002, update to a newer version or apply security patches to mitigate the risk. For Microsoft Excel v.X for Mac, apply the latest security patches or updates to fix the vulnerability.

Correção

Identificadores relacionados

CVE-2004-0846

Produtos afetados

Office Excel

Referências · 11

• https://exchange.xforce.ibmcloud.com/vulnerabilities/17683 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-033 · Aviso do Fabricante
• http://ciac.org/ciac/bulletins/p-009.shtml · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=109779810827096&w=2 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4226 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17653 · Nota
• http://kb.cert.org/vuls/id/274496 · Correção
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2673 · Nota
• http://secunia.com/advisories/12800 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0846 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0846 · Nota