Excel Viewer OCX ActiveX Control Multiple Remote Vulnerabilities

Bugtraq ID:	33222
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 12 2009 12:00AM
Updated:	Jan 13 2009 04:22PM
Credit:	Alfons Luja
Vulnerable:	Office OCX Excel Viewer OCX 3.2
Not Vulnerable:

Excel Viewer OCX ActiveX Control Multiple Remote Vulnerabilities

Excel Viewer OCX ActiveX control is prone to multiple remote vulnerabilities:

- An arbitrary-file-overwrite vulnerability
- An arbitrary-file-download vulnerability

Successfully exploiting these issues will allow an attacker to corrupt and overwrite arbitrary files on the victim's computer in the context of the vulnerable application using the ActiveX control (typically Internet Explorer).

Excel Viewer OCX 3.2 is vulnerable; other versions may also be affected.

Excel Viewer OCX ActiveX Control Multiple Remote Vulnerabilities

To exploit these issue, an attacker must entice an unsuspecting victim into viewing a malicious web page.

The following example exploit code is available:

• /data/vulnerabilities/exploits/33222.html

Excel Viewer OCX ActiveX Control Multiple Remote Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Excel Viewer OCX ActiveX Control Multiple Remote Vulnerabilities

References:

• Microsoft Knowledge Base Article 240797 (Microsoft)
  
• Vendor Homepage (Office OCX)