PT-2009-5454 · Microsoft · Office Excel Viewer+2
Bing Liu
·
Publicado
2009-11-11
·
Atualizado
2018-10-12
·
CVE-2009-3127
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Microsoft Office Excel 2002 SP3 and 2003 SP3
Office 2004 and 2008 for Mac
Open XML File Format Converter for Mac
Office Excel Viewer 2003 SP3
Description:
A remote code execution issue exists in the way Microsoft Office Excel handles specially crafted Excel files, allowing attackers to execute arbitrary code via a crafted spreadsheet. This could enable an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.
Recommendations:
For Microsoft Office Excel 2002 SP3, update to a version that properly parses the Excel file format to prevent arbitrary code execution.
For Microsoft Office Excel 2003 SP3, update to a version that properly handles specially crafted Excel files.
For Office 2004 and 2008 for Mac, update to a version that correctly parses the Excel file format.
For Open XML File Format Converter for Mac, update to a version that properly handles Excel files.
For Office Excel Viewer 2003 SP3, update to a version that correctly handles specially crafted Excel files.
Correção
RCE
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Office Excel
Office Excel Viewer
Open Xml File Format Converter For Mac