MS.Excel.COLINFO.Record.Code.Execution

description-logoDescription

This indicates a possible attempt to exploit a remote code execution vulnerability in Microsoft Excel.
Microsoft Excel is vulnerable to memory corruption caused by improper bounds checking of column values in the COLINFO record. A remote attacker can exploit this vulnerability to execute arbitrary commands by tricking a user into opening a specially crafted spreadsheet file.

affected-products-logoAffected Products

Microsoft Works Suite 2006 0
Microsoft Works Suite 2005 0
Microsoft Works Suite 2004
Microsoft Office XP SP3
Microsoft Office v. X
Microsoft Office 2004 for Mac 0
Microsoft Office 2003 SP2
Microsoft Office 2003 SP1
Microsoft Office 2000 SP3
Microsoft Excel x for Mac 0
Microsoft Excel Viewer 2003 0
Microsoft Excel 2004 for Mac 0
Microsoft Excel 2003 SP2
Microsoft Excel 2003 SP1
Microsoft Excel 2003
Microsoft Excel 2002 SP3
Microsoft Excel 2002 SP2
Microsoft Excel 2002 SP1
Microsoft Excel 2002
Microsoft Excel 2000 SR1
Microsoft Excel 2000 SP3
Microsoft Excel 2000 SP2
Microsoft Excel 2000

Impact logoImpact

System compromise: remote command execution.

recomended-action-logoRecommended Actions

Microsoft Excel x for Mac 0
* Microsoft Mactopia: Microsoft Office v. X for Mac 10.1.8 Update
http://www.microsoft.com/mac/downloads.aspx?pid=download&location=/mac /download/OFFICEX/OfficeX_1018.xml&secid=5&ssid=32&flgnosysreq=True
Microsoft Office XP SP3
* Microsoft officexp-KB923089-FullFile-ENU.exe
http://www.microsoft.com/downloads/details.aspx?familyid=D86620E8-C77A -45A9-9FF3-0A6AAF308984&displaylang=en
Microsoft Office 2003 SP2
* Microsoft office2003-KB923088-FullFile-ENU.exe
http://www.microsoft.com/downloads/details.aspx?familyid=A81A8537-E2B0 -4629-8973-40C4F32D9728&displaylang=en
Microsoft Works Suite 2005 0
* Microsoft officexp-KB923089-FullFile-ENU.exe
http://www.microsoft.com/downloads/details.aspx?familyid=D86620E8-C77A -45A9-9FF3-0A6AAF308984&displaylang=en
Microsoft Office 2000 SP3
* Microsoft office2000-kb923090-fullfile-enu.exe
http://www.microsoft.com/downloads/details.aspx?familyid=A4B2A672-481B -4AF6-89FE-DE8D321D99E0&displaylang=en
Microsoft Works Suite 2004
* Microsoft officexp-KB923089-FullFile-ENU.exe
http://www.microsoft.com/downloads/details.aspx?familyid=D86620E8-C77A -45A9-9FF3-0A6AAF308984&displaylang=en
Microsoft Excel 2004 for Mac 0
* Microsoft Microsoft Office 2004 for Mac 11.3.0 Update
http://www.microsoft.com/mac/downloads.aspx?pid=download&location=/mac /download/Office2004/Office2004_1130.xml&secid=4&ssid=31&flgnosysreq=T rue
Microsoft Excel 2003 SP2
* Microsoft office2003-KB923088-FullFile-ENU.exe
http://www.microsoft.com/downloads/details.aspx?familyid=A81A8537-E2B0 -4629-8973-40C4F32D9728&displaylang=en
Microsoft Excel 2002 SP3
* Microsoft officexp-KB923089-FullFile-ENU.exe
http://www.microsoft.com/downloads/details.aspx?familyid=D86620E8-C77A -45A9-9FF3-0A6AAF308984&displaylang=en
Microsoft Office 2004 for Mac 0
* Microsoft Microsoft Office 2004 for Mac 11.3.0 Update
http://www.microsoft.com/mac/downloads.aspx?pid=download&location=/mac /download/Office2004/Office2004_1130.xml&secid=4&ssid=31&flgnosysreq=T rue
Microsoft Excel 2002
* Microsoft officexp-KB923089-FullFile-ENU.exe
http://www.microsoft.com/downloads/details.aspx?familyid=D86620E8-C77A -45A9-9FF3-0A6AAF308984&displaylang=en
Microsoft Excel 2000 SP3
* Microsoft office2000-kb923090-fullfile-enu.exe
http://www.microsoft.com/downloads/details.aspx?familyid=A4B2A672-481B -4AF6-89FE-DE8D321D99E0&displaylang=en
Microsoft Office 2003 SP1
* Microsoft office2003-KB923088-FullFile-ENU.exe
http://www.microsoft.com/downloads/details.aspx?familyid=A81A8537-E2B0 -4629-8973-40C4F32D9728&displaylang=en
Microsoft Works Suite 2006 0
* Microsoft officexp-KB923089-FullFile-ENU.exe
http://www.microsoft.com/downloads/details.aspx?familyid=D86620E8-C77A -45A9-9FF3-0A6AAF308984&displaylang=en
Microsoft Excel Viewer 2003 0
* Microsoft office2003-KB923275-FullFile-ENU.exe
http://www.microsoft.com/downloads/details.aspx?familyid=74C72657-634D -4C31-A366-C68043FE3B34&displaylang=en

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)