Thread-topic: [SA19138] Microsoft Office Multiple Code Execution Vulnerabilities
>
>
> TITLE:
> Microsoft Office Multiple Code Execution Vulnerabilities
>
> SECUNIA ADVISORY ID:
> SA19138
>
> VERIFY ADVISORY:
>
>
> CRITICAL:
> Highly critical
>
> IMPACT:
> System access
>
> WHERE:
> From remote
>
> SOFTWARE:
> Microsoft Excel 2000
>
> Microsoft Excel 2002
>
> Microsoft Excel 2003
>
> Microsoft Excel Viewer 2003
>
> Microsoft Office 2000
>
> Microsoft Office 2003 Professional Edition
>
> Microsoft Office 2003 Small Business Edition
>
> Microsoft Office 2003 Standard Edition
>
> Microsoft Office 2003 Student and Teacher Edition
>
> Microsoft Office 2004 for Mac
>
> Microsoft Office X for Mac
>
> Microsoft Office XP
>
> Microsoft Outlook 2000
>
> Microsoft Outlook 2002
>
> Microsoft PowerPoint 2000
>
> Microsoft PowerPoint 2002
>
> Microsoft Word 2000
>
> Microsoft Word 2002
>
> Microsoft Works Suite 2001
>
> Microsoft Works Suite 2002
>
> Microsoft Works Suite 2003
>
> Microsoft Works Suite 2004
>
> Microsoft Works Suite 2005
>
> Microsoft Works Suite 2006
>
>
> DESCRIPTION:
> Multiple vulnerabilities have been reported in Microsoft Office,
> which can be exploited by malicious people to compromise a user's
> system.
>
> 1) An error in Excel when processing files with a malformed range can
> be exploited to corrupt memory and allows execution of arbitrary code
> on a user's system when viewing a specially crafted Excel file.
>
> 2) An error in Office when processing documents containing a
> specially crafted "routing slip" can be exploited to corrupt memory
> and allows execution of arbitrary code on a user's system when
> viewing a malicious document.
>
> 3) An error in Excel when processing a malformed parsing format file
> can be exploited to corrupt memory and allows execution of arbitrary
> code on a user's system when viewing a specially crafted Excel file.
>
> 4) An error in Excel when processing a malformed description can be
> exploited to corrupt memory and allows execution of arbitrary code on
> a user's system when viewing a specially crafted Excel file.
>
> 5) An error in Excel when processing malformed graphics can be
> exploited to corrupt memory and allows execution of arbitrary code on
> a user's system when viewing a specially crafted Excel file.
>
> 6) An error in Excel when processing malformed records can be
> exploited to corrupt memory and allows execution of arbitrary code on
> a user's system when viewing a specially crafted Excel file.
>
> SOLUTION:
> Apply patches.
>
> Microsoft Word 2000 (requires Office 2000 SP3):
>
9FD-37F5-4D09-B653-0174651CF5E4
>
> Microsoft Excel 2000 (requires Office 2000 SP3):
>
440-31EF-4C18-A0C7-B595EA23F6FC
>
> Microsoft Outlook 2000 (requires Office 2000 SP3):
>
231-AC83-4688-9C8D-DCDCB544FB3C
>
> Microsoft PowerPoint 2000 (requires Office 2000 SP3):
>
BD0-4771-4688-B52A-02D4EABB1574
>
> Microsoft Office 2000 MultiLanguage Packs (requires Office 2000
> SP3):
>
700-766F-4979-B51F-AAA0A24EF2E8
>
> Microsoft Word 2002 (requires Office XP SP3):
>
5FE-7A26-45F0-8D28-C9618FA7A458&displaylang=en
>
> Microsoft Excel 2002 (requires Office XP SP3):
>
7C7-8A47-4FA3-AB58-7A916B33607D&displaylang=en
>
> Microsoft Outlook 2002 (requires Office XP SP3):
>
441-4F88-4B59-A4F3-6FB558EF8135
>
> Microsoft PowerPoint 2002 (requires Office XP SP3):
>
45B-CF92-4EFC-8DBE-DBF4BDEBE215
>
> Microsoft Office XP Multilingual User Interface Packs (requires
> Office XP SP3):
>
ABB-6308-4208-881C-CE58D6972E1F&displaylang=en
>
> Microsoft Excel 2003 (requires Office 2003 SP1/SP2):
>
83A-B409-4469-984E-6C19D8F5FE41&displaylang=en
>
> Microsoft Excel 2003 Viewer (requires Office 2003 SP1/SP2):
>
BD1-0542-475B-91B5-90DD2AF2C0FC&displaylang=en
>
> Microsoft Works Suite 2000:
>
9FD-37F5-4D09-B653-0174651CF5E4&displaylang=en
>
> Microsoft Works Suite 2001:
>
9FD-37F5-4D09-B653-0174651CF5E4&displaylang=en
>
> Microsoft Works Suite 2002:
>
5FE-7A26-45F0-8D28-C9618FA7A458&displaylang=en
>
> Microsoft Works Suite 2003:
>
5FE-7A26-45F0-8D28-C9618FA7A458&displaylang=en
>
> Microsoft Works Suite 2004:
>
5FE-7A26-45F0-8D28-C9618FA7A458&displaylang=en
>
> Microsoft Works Suite 2005:
>
5FE-7A26-45F0-8D28-C9618FA7A458&displaylang=en
>
> Microsoft Works Suite 2006:
>
5FE-7A26-45F0-8D28-C9618FA7A458&displaylang=en
>
> Microsoft Office X for Mac:
>
>
> Microsoft Office 2004 for Mac:
>
>
> PROVIDED AND/OR DISCOVERED BY:
> 1) The vendor credits Peter Winter-Smith of NGSSoftware and
> FelicioX.
> 2) The vendor credits Ollie Whitehouse, Symantec.
> 3) The vendor credits TippingPoint and the Zero Day Initiative.
> 4) The vendor credits Dejun, Fortinet Security Response Team.
> 5) Reported by vendor.
> 6) The vendor credits Eyas, XFOCUS Security Team.
>
> ORIGINAL ADVISORY:
> MS06-012 (KB905413):
>
>
