[security-alerts] FW: [SA20268] Microsoft Excel Style Buffer Overflow Vulnerability

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> 
> TITLE:
> Microsoft Excel Style Buffer Overflow Vulnerability
> 
> SECUNIA ADVISORY ID:
> SA20268
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/20268/
> 
> CRITICAL:
> Highly critical
> 
> IMPACT:
> System access
> 
> WHERE:
> From remote
> 
> SOFTWARE:
> Microsoft Office XP
> http://secunia.com/product/23/
> Microsoft Office 2003 Student and Teacher Edition
> http://secunia.com/product/2278/
> Microsoft Office 2003 Standard Edition
> http://secunia.com/product/2275/
> Microsoft Office 2003 Small Business Edition
> http://secunia.com/product/2277/
> Microsoft Office 2003 Professional Edition
> http://secunia.com/product/2276/
> Microsoft Office 2000
> http://secunia.com/product/24/
> Microsoft Excel 2003
> http://secunia.com/product/4970/
> Microsoft Excel 2002
> http://secunia.com/product/4043/
> Microsoft Excel 2000
> http://secunia.com/product/3054/
> 
> DESCRIPTION:
> Nanika has reported a vulnerability in Microsoft Excel, which
> potentially can be exploited by malicious people to compromise a
> user's system.
> 
> The vulnerability is caused due to a boundary error when handling
> overly long styles. This can be exploited to cause a buffer overflow
> by tricking a user into opening a specially crafted spreadsheet.
> 
> Successful exploitation may allow execution of arbitrary code, but
> requires that the user chooses to repair the document (Excel
> 2002/2003) or clicks the "Style" option (Excel 2000).
> 
> NOTE: The vulnerability only affects certain Asian language versions
> (e.g. Chinese) of the product.
> 
> SOLUTION:
> Do not open untrusted office documents.
> 
> PROVIDED AND/OR DISCOVERED BY:
> Nanika
>