S-227: Vulnerabilities in Microsoft Excel (MS08-014)


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-227: Vulnerabilities in Microsoft Excel (MS08-014)
# 1  
Old 11-13-2008
S-227: Vulnerabilities in Microsoft Excel (MS08-014)

Remote code vulnerabilities exist in the way Excel: 1) processes data validation records when loading Excel files into memory; 2) handles data when importing files into Excel; 3) Style record data when opening Excel files; 4) handles malformed formulas; 5) handles rich text values when loading application data into memory; 6) handles conditional formatting values; and 7) handles macros when opening specially crafted Excel files. The risk is MEDIUM. An attacker could exploit the vulnerabilities by sending malformed files which could be hosted on a specially crafted or compromised Web site, or included as an e-mail attachment.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
Excel::Template::Element::Image(3pm)			User Contributed Perl Documentation		      Excel::Template::Element::Image(3pm)

NAME
Excel::Template::Element::Image - Excel::Template::Element::Image PURPOSE
To insert an image into the worksheet NODE NAME
IMAGE INHERITANCE
ELEMENT EFFECTS
This will consume one column in the current row. DEPENDENCIES
None USAGE
<image path="/Some/Full/Path" /> <image path="/Some/Full/Path" offset="2,5" /> <image path="/Some/Full/Path" scale="2,0.4" /> <image path="/Some/Full/Path" offset="4,0" scale="0,2" /> Please see "" in Spreadsheet::WriteExcel for more information about the offset and scaling options as well as any other restrictions that might be in place. This node does NOT perform any sort of validation upon your parameters. You are assumed to know what you are doing. Note that the offset and scaling values are "X,Y". You must provide both values, even if the Y value is 0. If you provide a 0 value for either scaling option, "" in Spreadsheet::WriteExcel will default that to 1. AUTHOR
Rob Kinyon (rob.kinyon@gmail.com) SEE ALSO
Nothing perl v5.14.2 2010-06-17 Excel::Template::Element::Image(3pm)