PT-2007-3117 · Microsoft · Office Excel
Publicado
2007-07-10
·
Atualizado
2018-10-30
·
CVE-2007-1756
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Microsoft Excel versions 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2007
Description:
The issue arises from improper validation of version information in Excel files, allowing remote attackers to execute arbitrary code via crafted Excel files. A remote code execution vulnerability exists in the way Excel handles malformed Excel files. An attacker could exploit this by sending a malformed file, which could be included as an e-mail attachment or hosted on a malicious Web site.
Recommendations:
For Microsoft Excel 2000 SP3, update to a version that properly validates Excel file version information.
For Microsoft Excel 2002 SP3, update to a version that properly validates Excel file version information.
For Microsoft Excel 2003 SP2, update to a version that properly validates Excel file version information.
For Microsoft Excel 2003 Viewer, update to a version that properly validates Excel file version information.
For Microsoft Office Excel 2007, update to a version that properly validates Excel file version information.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Office Excel