Description
Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka "Malformed OBJECT record Vulnerability."
References
- MS06-037 vendor-advisory
- 20060712 Microsoft Excel Array Index Error Remote Code Execution mailing-list
- oval:org.mitre.oval:def:950 vdb-entry signature
- 1016472 vdb-entry
- 18886 vdb-entry
- http://secway.org/advisory/AD20060711.txt
- ADV-2006-2755 vdb-entry