Microsoft Excel Spreadsheet Data Password Protection Bypass Vulnerability

Bugtraq ID:	3722
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Dec 17 2001 12:00AM
Updated:	Dec 17 2001 12:00AM
Credit:	Published in a Network World, Inc news article.
Vulnerable:	Microsoft Excel 97 SR2 Microsoft Excel 97 SR1 Microsoft Excel 97 + Microsoft Office 97 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Microsoft Excel 2002 + Microsoft Office XP - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Microsoft Excel 2000 + Microsoft Office 2000 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0
Not Vulnerable:

Microsoft Excel Spreadsheet Data Password Protection Bypass Vulnerability

An issue has been reported in one of Excel's security implementations which could enable a user to bypass password protected data in a document. Thus, enabling a user to potentially modify the contents of an excel file. This is attainable through the copy and paste function.

Microsoft Excel Spreadsheet Data Password Protection Bypass Vulnerability

No exploit is required.

Microsoft Excel Spreadsheet Data Password Protection Bypass Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft Excel Spreadsheet Data Password Protection Bypass Vulnerability

References:

• Excel's dirty little secret (Network World, Inc)