Microsoft Excel JavaScript Code Remote Denial Of Service Vulnerability
BID:28946
Info
Microsoft Excel JavaScript Code Remote Denial Of Service Vulnerability
| Bugtraq ID: | 28946 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 26 2008 12:00AM |
| Updated: | Apr 28 2008 06:36PM |
| Credit: | Juan Pablo Lopez Yacubian |
| Vulnerable: |
Microsoft Excel 2007 0 |
| Not Vulnerable: | |
Discussion
Microsoft Excel JavaScript Code Remote Denial Of Service Vulnerability
Microsoft Excel is prone to a remote denial-of-service vulnerability.
Attackers can exploit this issue to deny access to legitimate users. Given the nature of this vulnerability, attackers may also be able to execute arbitrary code, but this has not been confirmed.
Microsoft Excel 2007 is vulnerable; other versions may also be affected.
Microsoft Excel is prone to a remote denial-of-service vulnerability.
Attackers can exploit this issue to deny access to legitimate users. Given the nature of this vulnerability, attackers may also be able to execute arbitrary code, but this has not been confirmed.
Microsoft Excel 2007 is vulnerable; other versions may also be affected.
Exploit / POC
Microsoft Excel JavaScript Code Remote Denial Of Service Vulnerability
The following proof-of-concept HTML content has been made available:
The following proof-of-concept HTML content has been made available:
Solution / Fix
Microsoft Excel JavaScript Code Remote Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Microsoft Excel JavaScript Code Remote Denial Of Service Vulnerability
References:
References: