Description
Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a .XLS BIFF file with a malformed Named Graph record, which results in memory corruption.
References
- 34393 vdb-entry
- HPSBST02214 vendor-advisory
- excel-biff-file-bo(33913) vdb-entry
- 20070508 ZDI-07-026: Microsoft Excel BIFF File Format Named Graph Record Parsing Stack Overflow Vulnerability mailing-list
- oval:org.mitre.oval:def:1971 vdb-entry signature
- TA07-128A third-party-advisory
- 23760 vdb-entry
- MS07-023 vendor-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-07-026.html
- ADV-2007-1708 vdb-entry
- 1018012 vdb-entry
- 25150 third-party-advisory