OSVDB ID: 26527

Title: Microsoft Excel Malformed URL String Handling Overflow

Info

Disclosure

Jun 14, 2006

Discovery

Unknown

Dates

Exploit

Jun 14, 2006

Solution

Unknown

Description

Microsoft Excel contains a flaw related to a memory corruption error in the 'repair mode' functionality that may allow an attacker to execute remote arbitrary code. No further details have been provided.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation, Attack Type Unknown
Impact: Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Public, Virus / Malware
Disclosure: Vendor Verified, Uncoordinated Disclosure, Discovered in the Wild
OSVDB: Web Related

Solution

Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround: don't open untrusted Excel documents.

Products

Microsoft Corporation

Excel

2000
2002
2003
2004

References

Credit

  • Unknown -


Direct URL: http://osvdb.org/26527