Intrusion PreventionMS.Excel.ContinueFrt12.Record.Parsing.Heap.Buffer.Overflow
Description
This indicates an attack attempt to exploit a Buffer Overflow Vulnerability in Microsoft Office.
The vulnerability is due to improper validation on user-supplied data while parsing ContinueFrt12 records in an XLS document. A remote attacker can exploit this vulnerability by enticing a user to open a specially crafted XLS document. Successful exploitation could result in arbitrary code execution in the context of the currently logged on user
Affected Products
Microsoft Excel 2013
Microsoft Excel 2016
Microsoft Office 2019
Microsoft 365 Apps for Enterprise
Microsoft Office Online Server
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34501
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 50911 |
| Created | Nov 08, 2021 |
| Updated | Jun 29, 2022 |
| Risk |
|
| CVE ID | CVE-2021-34501 |
| Exploit Prediction Score | 1.58% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | MS_Office |