Wednesday, October 20, 2010

Microsoft Office Excel: Formula Record Dangling Pointer Vulnerability

Users of Microsoft Office Excel please be advised of a Formula Record Dangling Pointer vulnerability that has been identified.

To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)

Amplify’d from www.criticalwatch.com
CVE-2010-3235: Microsoft Office Excel Formula Record Dangling Pointer Vulnerability
. AFFECTED PRODUCTS

---------------------------



Microsoft Office XP Service Pack 3


. DESCRIPTION

---------------------



VUPEN Vulnerability Research Team discovered a critical vulnerability

in Microsoft Office Excel.



The vulnerability is caused by a dangling pointer when processing

certain Formula records in an Excel file, which could be exploited

by remote attackers to execute arbitrary code by tricking a user into

opening a specially crafted Excel document.


Read more at www.criticalwatch.com
 

No comments:

Post a Comment