Info

Disclosure

Feb 04, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Feb 13, 2007

Description

Classification

Location: Context Dependent
Impact: Loss of Integrity
Solution: Patch / RCS
Disclosure: Vendor Verified, Uncoordinated Disclosure, Discovered in the Wild

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability.

Products

Unknown or Incomplete

References

Security Tracker: 1017584
CVE ID: 2007-0671 (see also: NVD)
Bugtraq ID: 22383
Secunia Advisory ID: 24008
SCIP VulDB ID: 2894
ISS X-Force ID: 32178
CERT VU: 613740
VUPEN Advisory: ADV-2007-0463
Keyword: Exploit-MSExcel.h
Other Advisory URL: http://vil.nai.com/vil/content/v_141393.htm
http://www.avertlabs.com/research/blog/?p=191
News Article: http://www.eweek.com/article2/0,1895,2090525,00.asp
Vendor Specific News/Changelog Entry: http://www.microsoft.com/technet/security/advisory/932553.mspx
Microsoft Security Bulletin: MS07-015

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/31901