S-227: Vulnerabilities in Microsoft Excel (MS08-014)


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-227: Vulnerabilities in Microsoft Excel (MS08-014)
# 1  
Old 11-13-2008
S-227: Vulnerabilities in Microsoft Excel (MS08-014)

Remote code vulnerabilities exist in the way Excel: 1) processes data validation records when loading Excel files into memory; 2) handles data when importing files into Excel; 3) Style record data when opening Excel files; 4) handles malformed formulas; 5) handles rich text values when loading application data into memory; 6) handles conditional formatting values; and 7) handles macros when opening specially crafted Excel files. The risk is MEDIUM. An attacker could exploit the vulnerabilities by sending malformed files which could be hosted on a specially crafted or compromised Web site, or included as an e-mail attachment.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
Test::Excel::Template::Plus(3pm)			User Contributed Perl Documentation			  Test::Excel::Template::Plus(3pm)

NAME
Test::Excel::Template::Plus - Testing module for use with Excel::Template::Plus SYNOPSIS
use Test::More tests => 1; use Test::Excel::Template::Plus; my $template = Excel::Template::Plus->new( engine => 'TT', template => 'test.tmpl', config => { INCLUDE => [ '/templates' ] }, params => { ... } ); $template->write_file('test.xls'); # compare the file we just made with # an existing example file ... cmp_excel_files("test.xls", "t/xls/test.xls", '... the excel files matched'); DISCLAIMER
This module is woefully incomplete. It works for my very basic purposes right now, but it is surely going to need lots or work in the future to make it really usable. DESCRIPTION
This module attempts to provide a means of testing and comparing dynamically generated excel files. Currently it only supports comparing two excel files for some approximation of strutural (values within cells) and visual (formatting of said cells) equivalence. As a by product of the implementation, elements may get compared which don't really need comparing, and things which do need comparing may be skipped. This will get refined as time goes by and the module is used in more heavyweight situations. FUNCTIONS
cmp_excel_files($file1, $file2, $msg) BUGS
All complex software has bugs lurking in it, and this module is no exception. If you find a bug please either email me, or add the bug to cpan-RT. AUTHOR
Stevan Little <stevan@iinteractive.com> COPYRIGHT AND LICENSE
Copyright 2007-2010 by Infinity Interactive, Inc. <http://www.iinteractive.com> This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself. perl v5.14.2 2012-05-06 Test::Excel::Template::Plus(3pm)