Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

S-227: Vulnerabilities in Microsoft Excel (MS08-014)

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-227: Vulnerabilities in Microsoft Excel (MS08-014)
# 1  
Old 11-13-2008
S-227: Vulnerabilities in Microsoft Excel (MS08-014)
Remote code vulnerabilities exist in the way Excel: 1) processes data validation records when loading Excel files into memory; 2) handles data when importing files into Excel; 3) Style record data when opening Excel files; 4) handles malformed formulas; 5) handles rich text values when loading application data into memory; 6) handles conditional formatting values; and 7) handles macros when opening specially crafted Excel files. The risk is MEDIUM. An attacker could exploit the vulnerabilities by sending malformed files which could be hosted on a specially crafted or compromised Web site, or included as an e-mail attachment.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

excel::writer::xlsx::package::xmlwritersimple

Excel::Writer::XLSX::Package::XMLwriterSimple(3pm)	User Contributed Perl Documentation	Excel::Writer::XLSX::Package::XMLwriterSimple(3pm)

NAME

       XMLwriterSimple - Light weight re-implementation of XML::Writer.

       This module is used internally by Excel::Writer::XLSX.

DESCRIPTION

       This module is used by Excel::Writer::XLSX for writing XML documents. It is a light weight re-implementation of XML::Writer.

       XMLwriterSimple is approximately twice as fast as XML::Writer. This speed is achieved at the expense of error and correctness checking. In
       addition not all of the XML::Writer methods are implemented. As such, XMLwriterSimple is not recommended for use outside of
       Excel::Writer::XLSX.

       If required XMLwriterSimple can be overridden and XML::Writer can be used in its place by setting an "_EXCEL_WRITER_XLSX_USE_XML_WRITER"
       environmental variable:

	   export _EXCEL_WRITER_XLSX_USE_XML_WRITER=1
	   perl example.pl

	   Or for one off programs:

	   _EXCEL_WRITER_XLSX_USE_XML_WRITER=1 perl example.pl

       This technique is used for verifying the test suite with both XMLwriterSimple and XML::Writer:

	   _EXCEL_WRITER_XLSX_USE_XML_WRITER=1 prove -l -r t

SEE ALSO

       XML::Writer.

AUTHOR

       John McNamara jmcnamara@cpan.org

COPYRIGHT

       X MM-MMXII, John McNamara.

       All Rights Reserved. This module is free software. It may be used, redistributed and/or modified under the same terms as Perl itself.

LICENSE

       Either the Perl Artistic Licence <http://dev.perl.org/licenses/artistic.html> or the GPL
       <http://www.opensource.org/licenses/gpl-license.php>.

DISCLAIMER OF WARRANTY

       See the documentation for Excel::Writer::XLSX.

perl v5.10.1							    2012-04-02			Excel::Writer::XLSX::Package::XMLwriterSimple(3pm)