| Check Point Reference: |
SBP-2011-09 |
| Date Published: |
15 Jun 2011 |
| Severity: |
High
|
| Last Updated: |
Monday 20 June, 2011 |
| Source: |
Microsoft Security Bulletin MS11-045 |
| Industry Reference: | CVE-2011-1273 |
| Protection Provided by: |
|
| Who is Vulnerable? | Microsoft Excel 2002 Service Pack 3
Microsoft Excel 2003 Service Pack 3
Microsoft Excel 2007 Service Pack 2
Microsoft Excel 2010 (32-bit editions)
Microsoft Excel (64-bit editions)
Microsoft Office for Mac
Microsoft Office 2004 for Mac
Microsoft Office 2008 for Mac
Microsoft Office for Mac 2011
Open XML File Format Converter for Mac
Other Microsoft Office Software
Microsoft Excel Viewer Service Pack 2
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Service Pack 2 |
| Vulnerability Description |
A remote code execution vulnerability exists in the way that Microsoft Excel handles specially crafted Excel files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. |
| Update/Patch Avaliable | Apply patches from Microsoft Security Bulletin MS11-045 |
| Vulnerability Details | This is a remote code execution vulnerability. When Microsoft Excel validates record information upon opening a specially crafted Excel file, a memory handling error may corrupt system memory in such a way that an attacker could execute arbitrary code. An attacker who successfully exploited this vulnerability could take complete control of an affected system remotely |
Feedback