|
|
|
|
| |
Credit:
The information has been provided by Carsten Eiram.
The original article can be found at: http://secunia.com/secunia_research/2009-1/
|
| |
Vulnerable Systems:
* Microsoft Office Excel 2000
* Microsoft Office Excel 2002
* Microsoft Office Excel 2003
* Microsoft Office Excel 2007
* Microsoft Office 2004 for Mac
* Microsoft Office 2008 for Mac
* Open XML File Format Converter for Mac
* Microsoft Office Excel Viewer
* Microsoft Office Compatibility Pack
This security update resolves several privately reported vulnerabilities that could allow remote code execution if a user opens a specially crafted Excel file that includes a malformed record object. An attacker who successfully exploited any of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
The update addresses the vulnerabilities by modifying the way that Excel parses Excel files.
Patch Availability:
http://www.microsoft.com/technet/security/Bulletin/MS09-021.mspx
CVE Information:
CVE-2009-0558
Disclosure Timeline:
06/01/2009 - Vendor notified.
07/01/2009 - Vendor response.
08/01/2009 - Additional information provided to the vendor.
08/01/2009 - Vendor response.
19/02/2009 - Vendor provides status update.
24/04/2009 - Vendor provides status update.
22/05/2009 - Vendor provides status update.
09/06/2009 - Public disclosure.
|
|
|
|
|
