Description
Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via an Excel file with an out-of-range Column field in certain BIFF8 record types, which references arbitrary memory.
References
- TA07-009A third-party-advisory
- 31257 vdb-entry
- 1017487 vdb-entry
- oval:org.mitre.oval:def:323 vdb-entry signature
- HPSBST02184 vendor-advisory
- VU#302836 third-party-advisory
- 20070109 Microsoft Excel Invalid Column Heap Corruption Vulnerability third-party-advisory
- ADV-2007-0103 vdb-entry
- MS07-002 vendor-advisory
- 21925 vdb-entry