0-Day Microsoft Excel Unspecified Code Execution Vulnerability
Monday, 19 June 2006 by Michel Roth
A Vulnerability has been discovered in Microsoft Excel, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an unknown error within the processing of specially crafted Excel documents. Successful exploitation allows execution of arbitrary code.

The vulnerability has been confirmed on a fully updated Windows XP SP2 system with Microsoft Excel 2003 SP2. Other versions may also be affected.

NOTE: This vulnerability is a so-called 0-day and is already being actively exploited.

Read the full advisory here.

Related Items:

Internet Explorer "object" Tag Memory Corruption Code Execution (26 April 2006)
Microsoft Windows "itss.dll" Heap Corruption Unpatched Vulnerability (10 May 2006)
0-Day Microsoft Word 2000 Unspecified Code Execution Vulnerability (5 September 2006)
Warning: 0-Day Microsoft XMLHTTP ActiveX Control Code Execution Vulnerability (6 November 2006)
Firefox IDN URL Domain Name Buffer Overflow (13 September 2005)
Unpatched Internet Explorer Vulnerability, Exploit Released (8 November 2004)
Citrix ICA Client ActiveX Control Heap Overflow Vulnerability (6 December 2006)
Trend Micro Products AntiVirus Library Buffer Overflow (27 February 2005)
F-Secure for Citrix Servers Critical Vulnerability (15 February 2005)
VMware NAT Networking Buffer Overflow Vulnerability (21 December 2005)
Comments (0)add feed
password
 

busy