Microsoft Excel File Format Parsing Vulnerability - HeapOverflow Computer Security Community & Forums : Heap Overflow.com

HeapOverflow Computer Security Community & Forums : Heap Overflow.com

		HeapOverflow Computer Security Community & Forums : Heap Overflow.com > Computer Security: Discussions > Security discussions
Microsoft Excel File Format Parsing Vulnerability

Mark Forums Read

Notices

Welcome to you visitor! This community is mainly dedicated to the computer and security, if you're looking for DFind scanner or others exploits codes you will find them into the Projects section, feel free to start Blogging and remember to always keep an eye and start talking about security Advisories & public Exploits.

Security discussions Discuss about the computer security in general

Microsoft Excel File Format Parsing Vulnerability

This is a discussion on "Microsoft Excel File Format Parsing Vulnerability" within the Security discussions part of the Computer Security: Discussions section; ZDI-06-004 Microsoft Excel File Format Parsing Vulnerability March 14, 2006 CVE ID: CVE-2006-0028 Affected Vendor: Microsoft Affected Products: Office 2000 Office XP Office 2003 Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on ...

Reply

#1 (permalink)

Old

15-03-06

J-A is offline

Junior Member

Join Date: Jun 2005

Posts: 7

Thanks: 0

Thanked 0 Times in 0 Posts

Rep Power: 6

J-A is on a distinguished road

Default

Microsoft Excel File Format Parsing Vulnerability

ZDI-06-004

Microsoft Excel File Format Parsing Vulnerability

March 14, 2006

CVE ID:
CVE-2006-0028

Affected Vendor:
Microsoft

Affected Products:
Office 2000
Office XP
Office 2003

Vulnerability Details:
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office. Exploitation requires that the attacker coerce the target into opening a malicious .XLS file.

The specific flaw exists within the parsing of the BIFF file format used by Microsoft Excel. During the processing of malformed BOOLERR records, user-supplied data may be insecurely referenced thereby leading to the eventual execution of arbitrary code.

Vendor Response:
Microsoft has addressed this issue in Microsoft security bulletin MS06-012 titled "Vulnerabilities in Microsoft Office Could Allow Remote Code Execution":

http://www.microsoft.com/technet/securi ... 6-012.mspx

Disclosure Timeline:
2006.01.24 – Vulnerability reported to vendor
2006.02.21 – Digital Vaccine released to TippingPoint customers
2006.03.13 – Vulnerability information provided to ZDI security partners
2006.03.14 – Coordinated public release of advisory

Credit:
This vulnerability was discovered by class101, http://heapoverflow.com.

:wink:

Reply With Quote

Sponsor

Advertiser

#2 (permalink)

Old

15-03-06

class101 is offline

Administrator

Join Date: May 2005

Location: France

Age: 27

Posts: 592

Blog Entries: 3

Thanks: 18

Thanked 7 Times in 7 Posts

Rep Power: 10

class101 has disabled reputation

Send a message via MSN to class101

Default

__________________
Security community webmaster
100% Free Directory
100% Cool milw0rm javascript

Reply With Quote

#3 (permalink)

Old

15-03-06

class101 is offline

Administrator

Join Date: May 2005

Location: France

Age: 27

Posts: 592

Blog Entries: 3

Thanks: 18

Thanked 7 Times in 7 Posts

Rep Power: 10

class101 has disabled reputation

Send a message via MSN to class101

Default

looks like excel is on fire, more holes than in a cheese and if you had paid attention to my mailing list , I had warned about multiple excel threats since long time ago

__________________
Security community webmaster
100% Free Directory
100% Cool milw0rm javascript

Reply With Quote

Sponsor

Advertiser

Reply

Tags
excel, file, format, microsoft, parsing, vulnerability

« Microsoft Frowns on iDefense Hacking Challenge | do not use idefense for your critical bugs »

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
phpCMS 1.2.2 (parser.php file) Remote File Disclosure Vulnerability	Heap	Public	0	29-01-08 20:16
Microsoft DirectX SAMI File Parsing Remote Stack Overflow Exploit	Heap	Public	0	09-01-08 00:10
Microsoft Jet Engine MDB File Parsing Stack Overflow PoC	Heap	Public	0	16-11-07 15:46
Microsoft Excel Unpatched PoC	DiGiTALSTAR	Public	4	25-06-06 00:56
New eEye Upcoming Advisory	clark	Security discussions	8	26-07-05 02:47

heapoverflow.com - SEOmeter SEO tools

Locations of visitors to this page

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72