Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

S-227: Vulnerabilities in Microsoft Excel (MS08-014)

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-227: Vulnerabilities in Microsoft Excel (MS08-014)
# 1  
Old 11-13-2008
S-227: Vulnerabilities in Microsoft Excel (MS08-014)
Remote code vulnerabilities exist in the way Excel: 1) processes data validation records when loading Excel files into memory; 2) handles data when importing files into Excel; 3) Style record data when opening Excel files; 4) handles malformed formulas; 5) handles rich text values when loading application data into memory; 6) handles conditional formatting values; and 7) handles macros when opening specially crafted Excel files. The risk is MEDIUM. An attacker could exploit the vulnerabilities by sending malformed files which could be hosted on a specially crafted or compromised Web site, or included as an e-mail attachment.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

excel::writer::xlsx::package::packager

Excel::Writer::XLSX::Package::Packager(3pm)		User Contributed Perl Documentation	       Excel::Writer::XLSX::Package::Packager(3pm)

NAME

       Packager - A class for creating the Excel XLSX package.

SYNOPSIS

       See the documentation for Excel::Writer::XLSX.

DESCRIPTION

       This module is used in conjunction with Excel::Writer::XLSX to create an Excel XLSX container file.

       From Wikipedia: The Open Packaging Conventions (OPC) is a container-file technology initially created by Microsoft to store a combination
       of XML and non-XML files that together form a single entity such as an Open XML Paper Specification (OpenXPS) document.
       <http://en.wikipedia.org/wiki/Open_Packaging_Conventions>.

       At its simplest an Excel XLSX file contains the following elements:

	    ____ [Content_Types].xml
	   |
	   |____ docProps
	   | |____ app.xml
	   | |____ core.xml
	   |
	   |____ xl
	   | |____ workbook.xml
	   | |____ worksheets
	   | | |____ sheet1.xml
	   | |
	   | |____ styles.xml
	   | |
	   | |____ theme
	   | | |____ theme1.xml
	   | |
	   | |_____rels
	   |   |____ workbook.xml.rels
	   |
	   |_____rels
	     |____ .rels

       The "Excel::Writer::XLSX::Package::Packager" class co-ordinates the classes that represent the elements of the package and writes them into
       the XLSX file.

AUTHOR

       John McNamara jmcnamara@cpan.org

COPYRIGHT

       X MM-MMXII, John McNamara.

       All Rights Reserved. This module is free software. It may be used, redistributed and/or modified under the same terms as Perl itself.

LICENSE

       Either the Perl Artistic Licence <http://dev.perl.org/licenses/artistic.html> or the GPL
       <http://www.opensource.org/licenses/gpl-license.php>.

DISCLAIMER OF WARRANTY

       See the documentation for Excel::Writer::XLSX.

perl v5.10.1							    2012-04-02			       Excel::Writer::XLSX::Package::Packager(3pm)