Page 23 of 384 results (0.008 seconds)

CVSS: 9.3EPSS: 96%CPEs: 2EXPL: 0

CVE-2012-0143

https://notcve.org/view.php?id=CVE-2012-0143

09 May 2012 — Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Memory Corruption Using Various Modified Bytes Vulnerability." Microsoft Excel 2003 SP3 y Office 2008 para Mac no manejan correctamente la memoria durante la apertura de archivos, permitiendo a atacantes remotos ejecutar código arbitrario a través de una hoja de cálculo manipulada, también conocido como "Vuln... • http://secunia.com/advisories/49112 • CWE-399: Resource Management Errors •

CVSS: 9.3EPSS: 95%CPEs: 10EXPL: 0

CVE-2012-0184

https://notcve.org/view.php?id=CVE-2012-0184

09 May 2012 — Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SXLI Record Memory Corruption Vulnerability." Microsoft Excel 2003 SP3, 2007 SP2 y SP3, y 2010 Gold y SP1; Office 2008 y 2011 para Mac; Excel Viewer; y Office Compatibility Pack SP2 y SP3 no manejan correct... • http://secunia.com/advisories/49112 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 9.3EPSS: 90%CPEs: 10EXPL: 0

CVE-2012-1847 – Microsoft Excel Series Record Parsing Type Mismatch Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2012-1847

09 May 2012 — Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Series Record Parsing Type Mismatch Could Result in Remote Code Execution Vulnerability." Microsoft Excel 2003 SP3, 2007 SP2 y SP3, y 2010 Gold y SP1; Office 2008 y 2011 para Mac; Excel Viewer; y Office Com... • http://secunia.com/advisories/49112 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 9.3EPSS: 94%CPEs: 9EXPL: 0

CVE-2012-0141

https://notcve.org/view.php?id=CVE-2012-0141

09 May 2012 — Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel File Format Memory Corruption Vulnerability." Microsoft Excel 2003 SP3, 2007 SP2 y SP3, y 2010 Gold y SP1; Office 2011 para Mac; Excel Viewer; y Office Compatibility Pack SP2 y SP3 no manejan correctamente memoria d... • http://secunia.com/advisories/49112 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 95%CPEs: 2EXPL: 0

CVE-2011-3403

https://notcve.org/view.php?id=CVE-2011-3403

14 Dec 2011 — Microsoft Excel 2003 SP3 and Office 2004 for Mac do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet, aka "Record Memory Corruption Vulnerability." Microsoft Excel 2003 SP3 y Office 2004 para Mac no gestionan apropiadamente los objetos en memoria, lo que permite a atacantes remotos ejecutar código arbitrario a través de una hoja de cálculo Excel modificada. También conocida como "Vulnerabilidad de corrupción de memoria de registro... • http://www.us-cert.gov/cas/techalerts/TA11-347A.html • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 9.3EPSS: 96%CPEs: 1EXPL: 0

CVE-2011-1986

https://notcve.org/view.php?id=CVE-2011-1986

15 Sep 2011 — Use-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Use after Free WriteAV Vulnerability." Vulnerabilidad de uso después de liberación en Microsoft Excel 2003 SP3 permite a atacantes remotos ejecutar código de su elección a través de una hoja de cálculo debidamente modificada. Es un problema también conocido como "Vulnerabilidad de uso después de liberación de WriteAV en Excel." • http://www.us-cert.gov/cas/techalerts/TA11-256A.html • CWE-399: Resource Management Errors •

CVSS: 9.3EPSS: 95%CPEs: 17EXPL: 0

CVE-2011-1987

https://notcve.org/view.php?id=CVE-2011-1987

15 Sep 2011 — Array index error in Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Out of Bounds Array Indexing Vulnerability." Error de indice de matrices en Microsoft Excel 2003 Se... • http://www.us-cert.gov/cas/techalerts/TA11-256A.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 95%CPEs: 8EXPL: 0

CVE-2011-1988

https://notcve.org/view.php?id=CVE-2011-1988

15 Sep 2011 — Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly parse records in Excel spreadsheets, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Heap Corruption Vulnerability." Microsoft Excel 2003 Service Pack 3 y Service Pack 2 de 2007; Excel en Office 2007 SP2, Office 2... • http://www.us-cert.gov/cas/techalerts/TA11-256A.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 92%CPEs: 23EXPL: 0

CVE-2011-1989 – Microsoft Office Excel Conditional Expression Ptg Type Confusion Vulnerability

https://notcve.org/view.php?id=CVE-2011-1989

15 Sep 2011 — Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; Excel Services on Office SharePoint Server 2007 SP2; Excel Services on Office SharePoint Server 2010 Gold and SP1; and Excel Web App 2010 Gold and SP1 do not properly parse conditional expressions associated wit... • http://www.us-cert.gov/cas/techalerts/TA11-256A.html • CWE-20: Improper Input Validation •

CVSS: 9.3EPSS: 94%CPEs: 6EXPL: 0

CVE-2011-1990 – Microsoft Office Graph DataFormat Signed Index Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2011-1990

15 Sep 2011 — Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Excel Services on Office SharePoint Server 2007 SP2 do not properly validate the sign of an unspecified array index, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Out of Bounds Array Indexing Vulnerability." Microsoft Excel 2007 Service Pack 2; Excel en Office 2007 SP2, Excel Viewer SP2, Paquete de compatibi... • http://www.us-cert.gov/cas/techalerts/TA11-256A.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •