Description
Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell comments, which lead to modification of "critical data offsets" during the rebuilding process.
References
- MS06-037 vendor-advisory
- 1016472 vdb-entry
- 18938 vdb-entry
- 20060711 ZDI-06-022: Microsoft Office Excel File Rebuilding Code Execution Vulnerability mailing-list
- ADV-2006-2755 vdb-entry
- oval:org.mitre.oval:def:234 vdb-entry signature
- http://www.zerodayinitiative.com/advisories/ZDI-06-022.html
- excel-cell-rebuilding-code-execution(27604) vdb-entry