Microsoft Excel Sheet Name Remote Denial Of Service Vulnerability
BID:24691
Info
Microsoft Excel Sheet Name Remote Denial Of Service Vulnerability
| Bugtraq ID: | 24691 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2007-3490 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 28 2007 12:00AM |
| Updated: | May 07 2015 05:37PM |
| Credit: | ZhenHan.Liu is credited with the discovery of this issue. |
| Vulnerable: |
Microsoft Excel 2003 SP2 Microsoft Excel 2000 SP2 |
| Not Vulnerable: | |
Discussion
Microsoft Excel Sheet Name Remote Denial Of Service Vulnerability
Microsoft Excel is prone to a remote denial-of-service vulnerability.
Attackers can exploit this issue to deny access to legitimate users. Given the nature of this vulnerability, attackers may also be able to execute arbitrary code, but this has not been confirmed.
Excel 2000 and 2003 are vulnerable; other versions may also be affected.
Microsoft Excel is prone to a remote denial-of-service vulnerability.
Attackers can exploit this issue to deny access to legitimate users. Given the nature of this vulnerability, attackers may also be able to execute arbitrary code, but this has not been confirmed.
Excel 2000 and 2003 are vulnerable; other versions may also be affected.
Exploit / POC
Microsoft Excel Sheet Name Remote Denial Of Service Vulnerability
The following proof-of-concept XLS file has been made available:
The following proof-of-concept XLS file has been made available:
Solution / Fix
Microsoft Excel Sheet Name Remote Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
References
Microsoft Excel Sheet Name Remote Denial Of Service Vulnerability
References:
References:
- [Exploit]Microsoft Excel 2000/2003 Sheet Name Vulnerability PoC(0day) (Ph4nt0m Security Team)
- Microsoft Office Product Homepage (Microsoft)