T-003: Vulnerabilities in Microsoft Excel


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) T-003: Vulnerabilities in Microsoft Excel
# 1  
Old 11-13-2008
T-003: Vulnerabilities in Microsoft Excel

Several remote code execution vulnerabilities exist in the way Microsoft Excel: 1) processes a VBA Performance Cache; 2) an improper memory allocationwhenloading Excel objects; and 3) a formula parsing vulnerability when parsing Microsoft Excel documents containing a specially crafted formula embedded inside a cell. The risk is MEDIUM. An attacker who successfully exploited this vulnerability could take complete control of an affected system.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
Excel::Writer::XLSX::Package::Packager(3pm)		User Contributed Perl Documentation	       Excel::Writer::XLSX::Package::Packager(3pm)

NAME
Packager - A class for creating the Excel XLSX package. SYNOPSIS
See the documentation for Excel::Writer::XLSX. DESCRIPTION
This module is used in conjunction with Excel::Writer::XLSX to create an Excel XLSX container file. From Wikipedia: The Open Packaging Conventions (OPC) is a container-file technology initially created by Microsoft to store a combination of XML and non-XML files that together form a single entity such as an Open XML Paper Specification (OpenXPS) document. <http://en.wikipedia.org/wiki/Open_Packaging_Conventions>. At its simplest an Excel XLSX file contains the following elements: ____ [Content_Types].xml | |____ docProps | |____ app.xml | |____ core.xml | |____ xl | |____ workbook.xml | |____ worksheets | | |____ sheet1.xml | | | |____ styles.xml | | | |____ theme | | |____ theme1.xml | | | |_____rels | |____ workbook.xml.rels | |_____rels |____ .rels The "Excel::Writer::XLSX::Package::Packager" class co-ordinates the classes that represent the elements of the package and writes them into the XLSX file. AUTHOR
John McNamara jmcnamara@cpan.org COPYRIGHT
X MM-MMXII, John McNamara. All Rights Reserved. This module is free software. It may be used, redistributed and/or modified under the same terms as Perl itself. LICENSE
Either the Perl Artistic Licence <http://dev.perl.org/licenses/artistic.html> or the GPL <http://www.opensource.org/licenses/gpl-license.php>. DISCLAIMER OF WARRANTY
See the documentation for Excel::Writer::XLSX. perl v5.10.1 2012-04-02 Excel::Writer::XLSX::Package::Packager(3pm)