Description
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.
References
- ADV-2006-0950 vdb-entry
- oval:org.mitre.oval:def:1411 vdb-entry signature
- oval:org.mitre.oval:def:1509 vdb-entry signature
- oval:org.mitre.oval:def:1158 vdb-entry signature
- 583 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm
- 19238 third-party-advisory
- VU#339878 third-party-advisory
- TA06-073A third-party-advisory
- 19138 third-party-advisory
- 20060314 ZDI-06-004: Microsoft Excel File Format Parsing Vulnerability mailing-list
- 1015766 vdb-entry
- 23899 vdb-entry
- oval:org.mitre.oval:def:1635 vdb-entry signature
- MS06-012 vendor-advisory
- excel-parsing-format-file-bo(25225) vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-06-004.html