Description
Array index vulnerability in Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP3; Excel Viewer 2003 Gold and SP3; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via an Excel spreadsheet with a NAME record that contains an invalid index value, which triggers stack corruption, aka "Excel Global Array Memory Corruption Vulnerability."
References
- http://secunia.com/secunia_research/2008-36/
- MS08-074 vendor-advisory
- ADV-2008-3386 vdb-entry
- 20081209 Secunia Research: Microsoft Excel NAME Record Array Indexing Vulnerability mailing-list
- oval:org.mitre.oval:def:5808 vdb-entry signature
- 1021368 vdb-entry
- TA08-344A third-party-advisory