Microsoft Excel QSIR Record Pointer Corruption Remote Code Execution Vulnerability

Bugtraq ID:	35246
Class:	Unknown
CVE:	CVE-2009-1134
Remote:	Yes
Local:	No
Published:	Jun 09 2009 12:00AM
Updated:	Jun 10 2009 08:49PM
Credit:	TippingPoint and the Zero Day Initiative
Vulnerable:	Microsoft Office Compatibility Pack 2007 SP2 Microsoft Office Compatibility Pack 2007 SP1 Microsoft Office Compatibility Pack 2007 0 Microsoft Excel Viewer 0 Microsoft Excel 2007 SP2 Microsoft Excel 2007 SP1 Microsoft Excel 2007 0 Microsoft Excel 2007 0
Not Vulnerable:

Microsoft Excel QSIR Record Pointer Corruption Remote Code Execution Vulnerability

Microsoft Excel is prone to a remote code-execution vulnerability.

Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel ('.xls') file.

Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the application.

Microsoft Excel QSIR Record Pointer Corruption Remote Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Excel QSIR Record Pointer Corruption Remote Code Execution Vulnerability

Solution:
The vendor has released a security bulletin along with fixes. Please see the references for details.


Microsoft Excel Viewer 0

• Microsoft Security Update for Microsoft Office Excel Viewer (KB969686)
  http://www.microsoft.com/downloads/details.aspx?familyid=ac0530dc-7f63 -4ad0-85c1-784ad28156cf

Microsoft Office Compatibility Pack 2007 SP2

• Microsoft Security Update for the 2007 Microsoft Office System (KB969679)
  http://www.microsoft.com/downloads/details.aspx?familyid=a8be8457-b0b6 -455e-907e-d13be883adf2

Microsoft Excel 2007 SP1

• Microsoft Security Update for Microsoft Office Excel 2007 (KB969682)
  http://www.microsoft.com/downloads/details.aspx?familyid=2bcd565a-6acb -407d-80da-0398526ddf99

Microsoft Excel 2007 SP2

• Microsoft Security Update for Microsoft Office Excel 2007 (KB969682)
  http://www.microsoft.com/downloads/details.aspx?familyid=2bcd565a-6acb -407d-80da-0398526ddf99

Microsoft Office Compatibility Pack 2007 SP1

• Microsoft Security Update for the 2007 Microsoft Office System (KB969679)
  http://www.microsoft.com/downloads/details.aspx?familyid=a8be8457-b0b6 -455e-907e-d13be883adf2

Microsoft Excel QSIR Record Pointer Corruption Remote Code Execution Vulnerability

References:

• Microsoft Excel Homepage (Microsoft )
  
• ZDI-09-040: Microsoft Office Excel QSIR Record Pointer Corruption Vulnerability (ZDI Disclosures )
  
• Microsoft Security Bulletin MS09-021 (Microsoft)
  
• ZDI-09-040 Microsoft Office Excel QSIR Record Pointer Corruption Vulnerability (Zero Day Initiative)