Description
Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a BIFF file with a malformed Qsir (0x806) record object, aka "Record Pointer Corruption Vulnerability."
References
- 35246 vdb-entry
- 20090610 ZDI-09-040: Microsoft Office Excel QSIR Record Pointer Corruption Vulnerability mailing-list
- ADV-2009-1540 vdb-entry
- 1022351 vdb-entry
- MS09-021 vendor-advisory
- 54958 vdb-entry
- TA09-160A third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-09-040/
- oval:org.mitre.oval:def:5922 vdb-entry signature