T-003: Vulnerabilities in Microsoft Excel


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) T-003: Vulnerabilities in Microsoft Excel
# 1  
Old 11-13-2008
T-003: Vulnerabilities in Microsoft Excel

Several remote code execution vulnerabilities exist in the way Microsoft Excel: 1) processes a VBA Performance Cache; 2) an improper memory allocationwhenloading Excel objects; and 3) a formula parsing vulnerability when parsing Microsoft Excel documents containing a specially crafted formula embedded inside a cell. The risk is MEDIUM. An attacker who successfully exploited this vulnerability could take complete control of an affected system.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
Excel::Template::Element::Formula(3pm)			User Contributed Perl Documentation		    Excel::Template::Element::Formula(3pm)

NAME
Excel::Template::Element::Formula - Excel::Template::Element::Formula PURPOSE
To write formulas to the worksheet NODE NAME
FORMULA INHERITANCE
Excel::Template::Element::Cell ATTRIBUTES
All attributes a CELL can have, a FORMULA can have, including the ability to be referenced using the 'ref' attribute. CHILDREN
None EFFECTS
This will consume one column on the current row. DEPENDENCIES
None USAGE
<formula text="=(1 + 2)"/> <formula>=SUM(A1:A5)</formula> <formula text="$Param2"/> <formula>=(A1 + <var name="Param">)</formula> In the above example, four formulas are written out. The first two have the formula hard-coded. The second two have variables. The third and fourth items have another thing that should be noted. If you have a formula where you want a variable in the middle, you have to use the latter form. Variables within parameters are the entire parameter's value. AUTHOR
Rob Kinyon (rob.kinyon@gmail.com) SEE ALSO
CELL perl v5.14.2 2010-06-17 Excel::Template::Element::Formula(3pm)