PT-2008-5336 · Microsoft · Office For Mac+6

Publicado 2008-10-14 · Atualizado 2022-02-09 · CVE-2008-4019

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1 Office Excel Viewer 2003 SP3 Office Excel Viewer Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1 Office SharePoint Server 2007 Gold and SP1 Office 2004 and 2008 for Mac Open XML File Format Converter for Mac

Description The issue arises from an integer overflow in the REPT function when parsing Microsoft Excel documents containing a specially crafted formula embedded inside a cell. This can result in a remote compromise of the system under the context of the currently logged in user.

Recommendations For Microsoft Excel 2000 SP3, consider disabling the REPT function until a patch is available. For Microsoft Excel 2002 SP3, restrict access to files containing specially crafted formulas to minimize the risk of exploitation. For Microsoft Excel 2003 SP2 and SP3, and 2007 Gold and SP1, avoid using the REPT function in formulas until the issue is resolved. For Office Excel Viewer 2003 SP3, Office Excel Viewer, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1, Office SharePoint Server 2007 Gold and SP1, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2008-4019

Produtos afetados

Office Excel

Office Compatibility Pack For Word

Office Excel Viewer

Office Sharepoint Server

Office For Mac

Open Xml File Format Converter For Mac

Sharepoint Server

Referências · 14

• http://securityfocus.com/bid/31706 · Correção
• http://marc.info/?l=bugtraq&m=122479227205998&w=2 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/2808 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6102 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4019 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA08-288A.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4019 · Nota de Segurança
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-057 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45580 · Nota
• http://securitytracker.com/id?1021044 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-057 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45581 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4019 · Nota
• http://secunia.com/advisories/32211 · Aviso do Fabricante