vendor:
Excel
by:
ZhenHan.Liu
9
CVSS
CRITICAL
Remote Buffer Overflow
CWE
Product Name: Excel
Affected Version From: Excel 2003 Sp2
Affected Version To: Excel 2003 Sp2
Patch Exists: NO
Related CWE:
CPE: a:microsoft:excel:2003:sp2
Platforms Tested: Windows
2007
Excel 2003 Sp2 Remote Buffer Overflow Vulnerability
This exploit takes advantage of a remote buffer overflow vulnerability in Excel 2003 Sp2. An attacker can send a specially crafted Excel file to a victim, and when the victim opens the file, it triggers the buffer overflow, allowing the attacker to execute arbitrary code on the victim's machine. This vulnerability was discovered by ZhenHan.Liu of Ph4nt0m Security Team.
Mitigation:
Apply the latest security patches and updates from Microsoft to mitigate this vulnerability. Do not open Excel files from untrusted sources.
