Description
Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file involving the "denoting [of] the start of a Workspace designation", which results in memory corruption, aka the "Workbook Memory Corruption Vulnerability".
References
- SSRT071446 vendor-advisory
- oval:org.mitre.oval:def:1709 vdb-entry signature
- 1018352 vdb-entry
- MS07-036 vendor-advisory
- 24803 vdb-entry
- 35959 vdb-entry
- ADV-2007-2478 vdb-entry
- excel-workspace-designation-code-execution(35217) vdb-entry
- 25995 third-party-advisory
- TA07-191A third-party-advisory