MS.Excel.Richtext.SST.Record.Code

NameMS.Excel.Richtext.SST.Record.Code.Execution
Release DateAug 06, 2009
SeverityCritical
ImpactSystem compromise
DescriptionThis indicates an attack attempt against a remote code-execution vulnerability in Microsoft Excel.

The vulnerability is caused by an error when the vulnerable software handles a specially crafted Excel file. It allows a remote attacker to execute arbitrary code.
Affected ProductsMicrosoft Excel 2000 Service Pack 3
Microsoft Excel 2002 Service Pack 3
Microsoft Excel 2003 Service Pack 2
Microsoft Excel 2007
Recommended ActionsApply the patch available at the vendor's web site:
http://www.microsoft.com/technet/security/bulletin/MS08-014.mspx
Common Vulnerabilities and Exposures (CVE)http://cve.mitre.org/cgi-bin/cvename.cgi?name=2008-0116
Microsoft Bulletin IDMS08-014   http://www.microsoft.com/technet/security/Bulletin/ms08-014.mspx
Reference/shttp://www.vupen.com/english/advisories/2008/0846 (FrSIRT)
http://www.milw0rm.com/exploits/5287
Reference: VID-15476