Microsoft Works Spreadsheet Multiple Remote Vulnerabilities
BID:18989
CVE-2006-3653 | CVE-2006-3654 |Info
Microsoft Works Spreadsheet Multiple Remote Vulnerabilities
| Bugtraq ID: | 18989 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 14 2006 12:00AM |
| Updated: | Oct 06 2006 10:10PM |
| Credit: | Benjamin Tobias Franz is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Microsoft Works 8.0 |
| Not Vulnerable: | |
Discussion
Microsoft Works Spreadsheet Multiple Remote Vulnerabilities
The spreadsheet component of Microsoft Works is prone to multiple remote vulnerabilities, including buffer-overflow and denial-of service issues.
These issues occur because the application fails to handle specifically crafted spreadsheet documents when importing them into Microsoft Works.
These vulnerabilities allow remote attackers to execute arbitrary machine code in the context of affected application. Attackers may also crash vulnerable applications, denying service to legitimate users.
Microsoft Works version 8.0 is vulnerable to these issues; other versions may also be affected.
The spreadsheet component of Microsoft Works is prone to multiple remote vulnerabilities, including buffer-overflow and denial-of service issues.
These issues occur because the application fails to handle specifically crafted spreadsheet documents when importing them into Microsoft Works.
These vulnerabilities allow remote attackers to execute arbitrary machine code in the context of affected application. Attackers may also crash vulnerable applications, denying service to legitimate users.
Microsoft Works version 8.0 is vulnerable to these issues; other versions may also be affected.
Exploit / POC
Microsoft Works Spreadsheet Multiple Remote Vulnerabilities
The following proofs of concept are available; Symantec does not guarantee their safety:
The following proofs of concept are available; Symantec does not guarantee their safety:
Solution / Fix
Microsoft Works Spreadsheet Multiple Remote Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Microsoft Works Spreadsheet Multiple Remote Vulnerabilities
References:
References:
- Microsoft Works Homepage (Microsoft )