[security-alerts] FW: [SA25150] Microsoft Excel Three Code Execution Vulnerabilities

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> 
> TITLE:
> Microsoft Excel Three Code Execution Vulnerabilities
> 
> SECUNIA ADVISORY ID:
> SA25150
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/25150/
> 
> CRITICAL:
> Highly critical
> 
> IMPACT:
> System access
> 
> WHERE:
> From remote
> 
> SOFTWARE:
> Microsoft Office XP
> http://secunia.com/product/23/
> Microsoft Office Excel 2007
> http://secunia.com/product/14161/
> Microsoft Office 2007
> http://secunia.com/product/13228/
> Microsoft Office 2004 for Mac
> http://secunia.com/product/8713/
> Microsoft Office 2003 Student and Teacher Edition
> http://secunia.com/product/2278/
> Microsoft Office 2003 Standard Edition
> http://secunia.com/product/2275/
> Microsoft Office 2003 Small Business Edition
> http://secunia.com/product/2277/
> Microsoft Office 2003 Professional Edition
> http://secunia.com/product/2276/
> Microsoft Office 2000
> http://secunia.com/product/24/
> Microsoft Excel Viewer 2003
> http://secunia.com/product/7700/
> Microsoft Excel 2003
> http://secunia.com/product/4970/
> Microsoft Excel 2002
> http://secunia.com/product/4043/
> Microsoft Excel 2000
> http://secunia.com/product/3054/
> Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint
> 2007 File Formats
> http://secunia.com/product/14165/
> 
> DESCRIPTION:
> Three vulnerabilities have been reported in Microsoft Excel, which
> can be exploited by malicious people to compromise a user's system.
> 
> 1) An error when handling malformed BIFF records can be exploited to
> corrupt memory via a specially crafted file.
> 
> 2) An error when handling set font values within Excel files can be
> exploited to corrupt memory via a malicious file containing a
> specially crafted set font value.
> 
> 3) An error when handling filter records can be exploited to corrupt
> memory via a specially crafted file.
> 
> Successful exploitation of the vulnerabilities allows execution of
> arbitrary code.
> 
> SOLUTION:
> Apply patches.
> 
> Microsoft Excel 2000 (Office SP3):
> http://www.microsoft.com/downloads/details.aspx?FamilyId=5F101
> D03-C0A7-41E0-95A4-A12AFB356D5F
> 
> Microsoft Excel 2002 (Office SP3):
> http://www.microsoft.com/downloads/details.aspx?FamilyId=29596
> 861-D9F0-4A10-9E1C-CDA75DDE017D
> 
> Microsoft Excel 2003 (Office SP2):
> http://www.microsoft.com/downloads/details.aspx?FamilyId=9567C
> 583-556F-4379-80BA-3E0C8993C04C
> 
> Microsoft Excel 2003 Viewer:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=3C7F1
> 8AC-24BB-41CF-B8DA-997706FDC44C
> 
> Microsoft Office Excel 2007:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=CED9F
> 11B-CE48-47A3-9288-BD11B80F3D85
> 
> Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint
> 2007 File Formats:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=50A79
> 24F-DB51-438A-B27D-37E40A471E60
> 
> Microsoft Office 2004 for Mac:
> http://www.microsoft.com/mac
> 
> PROVIDED AND/OR DISCOVERED BY:
> 1) Discovered by Manuel Santamarina Suarez and reported via ZDI.
> 2) Reported by the vendor.
> 3) The vendor credits Greg MacManus, iDefense Labs.
> 
> ORIGINAL ADVISORY:
> MS07-023 (934233):
> http://www.microsoft.com/technet/security/Bulletin/MS07-023.mspx
>