---

[Message Precedent sur la mailing][Message Suivant sur la mailing][Precedent dans le fil][Prochain dans le fil][Index par Date][Index par fil] [SA26145] Microsoft Excel rtWnDesk Record Memory Corruption Vulnerability

---

---

BETA test the new Secunia Personal Software Inspector! The Secunia PSI detects installed software on your computer and categorises it as either Insecure, End-of-Life, or Up-To-Date.

Effectively enabling you to focus your attention on software installations where more secure versions are available from the vendors.

Download the free PSI BETA from the Secunia website: link://[click]

TITLE: Microsoft Excel rtWnDesk Record Memory Corruption Vulnerability

SECUNIA ADVISORY ID: SA26145

VERIFY ADVISORY: link://[click]

CRITICAL: Highly critical

IMPACT: System access

WHERE: From remote SOFTWARE: Microsoft Excel 2000 link://[click] Microsoft Excel 2002 link://[click] Microsoft Excel 2003 link://[click] Microsoft Excel Viewer 2003 link://[click] Microsoft Office 2000 link://[click] Microsoft Office XP link://[click] Microsoft Office 2004 for Mac link://[click] Microsoft Office 2003 Small Business Edition link://[click] Microsoft Office 2003 Standard Edition link://[click] Microsoft Office 2003 Student and Teacher Edition link://[click] Microsoft Office 2003 Professional Edition link://[click]

DESCRIPTION: Secunia Research has discovered a vulnerability in Microsoft Excel, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error when validating an index value in the rtWnDesk record and can be exploited to corrupt memory via a specially crafted Excel Workspace (XLW) file.

Successful exploitation may allow execution of arbitrary code.

Other unspecified security issues discovered internally by Microsoft have also been reported.

SOLUTION: Apply patches.

Microsoft Office 2000 SP3: link://[click] Microsoft Office XP SP3: link://[click] Microsoft Office 2003 SP2: link://[click] Microsoft Excel Viewer 2003: link://[click] Microsoft Office 2004 for Mac: link://[click] PROVIDED AND/OR DISCOVERED BY: Dyon Balding, Secunia Research.



ORIGINAL ADVISORY: MS07-044 (KB940965): link://[click]

About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.

Subscribe: link://[click]

Definitions: (Criticality, Where etc.) link://[click]

Please Note: Secunia recommends that you verify all advisories you receive by clicking the link.

Secunia NEVER sends attached files with advisories.

Secunia does not advise people to install third party patches, only use those supplied by the vendor.

---

• Precedent par Date: [SA26442] Infrant ReadyNAS Devices SSH Default Root Password Weakness
• Suivant par Date: [SA26433] Windows Media Player Skin Handling Code Execution Vulnerabilities
• Precedent par fil : [SA26442] Infrant ReadyNAS Devices SSH Default Root Password Weakness
• Suivant par fil : [SA26433] Windows Media Player Skin Handling Code Execution Vulnerabilities
• Index(s):
  • Date
  • Fil

---

Archives de la liste de diffusion Secunia
Archives de la liste de diffusion BugTraq
Archives de la liste de diffusion DailyDave
Archives de la liste de diffusion FunSec
Archives de la liste de diffusion Full Disclosure
Archives de la liste de diffusion Focus-IDS (FD)
Archives de la liste de diffusion Webappsec (FD)
Archives de la liste de diffusion Security-basics (FD)
Archives de la liste de diffusion Vulndiscuss
Archives de la liste de diffusion Vulnwatch