Microsoft Excel Array Indexing 'iax' Field Remote Code Execution Vulnerability

Bugtraq ID:	49477
Class:	Unknown
CVE:	CVE-2011-1987
Remote:	Yes
Local:	No
Published:	Sep 13 2011 12:00AM
Updated:	Sep 14 2011 04:30PM
Credit:	Sean Larsson of VeriSign iDefense Labs
Vulnerable:	Microsoft Open Xml File Format Converter Mac Microsoft Office Compatibility Pack 2007 SP2 Microsoft Office Compatibility Pack 2007 SP1 Microsoft Office Compatibility Pack 2007 0 Microsoft Office 2011 for Mac SP1 Microsoft Office 2011 for Mac 0 Microsoft Office 2008 for Mac 0 Microsoft Office 2004 for Mac 0 Microsoft Excel Viewer SP2 Microsoft Excel 2010 0 Microsoft Excel 2008 for Mac 0 Microsoft Excel 2007 SP2 Microsoft Excel 2007 SP1 Microsoft Excel 2007 0 Microsoft Excel 2004 for Mac 0 Microsoft Excel 2003 SP3 Microsoft Excel 2003 SP2 Microsoft Excel 2003 SP1 + Microsoft Office 2003 SP1 Microsoft Excel 2003 + Microsoft Office 2003 0
Not Vulnerable:

Microsoft Excel Array Indexing 'iax' Field Remote Code Execution Vulnerability

Microsoft Excel is prone to a remote code-execution vulnerability.

Attackers could exploit this issue by enticing victims to open a maliciously crafted Excel file.

Successful exploits will allow attackers to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will result in a denial-of-service condition.

Microsoft Excel Array Indexing 'iax' Field Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Excel Array Indexing 'iax' Field Remote Code Execution Vulnerability

Solution:
The vendor released an update. Please see the references for details.


Microsoft Office 2008 for Mac 0

• Microsoft Microsoft Office 2008 for Mac 12.3.1 Update
  http://www.microsoft.com/downloads/details.aspx?FamilyID=afa79cfc-6e8a -4d0b-88aa-0d7e05031e44

Microsoft Excel 2003 SP3

• Microsoft Security Update for Microsoft Office Excel 2003 (KB2553072)
  http://www.microsoft.com/downloads/details.aspx?familyid=DEE4F3D7-BC4B -47FD-8E3F-9D2B0E82D0F6

Microsoft Office Compatibility Pack 2007 SP2

• Microsoft Security Update for the 2007 Microsoft Office System (KB2553074)
  http://www.microsoft.com/downloads/details.aspx?familyid=01093F22-06B7 -4C9B-BFF9-F54AC5D73BF8

Microsoft Excel 2010 0

• Microsoft Security Update for Microsoft Excel 2010 (KB2553070), 32-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=4612C6E4-AC29 -4CC4-9DA5-88779EA3643E


• Microsoft Security Update for Microsoft Excel 2010 (KB2553070), 64-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=D40DB27B-1318 -4CA7-B44F-C90BB6342109

Microsoft Office 2011 for Mac 0

• Microsoft Microsoft Office 2011 14.1.3 Update
  http://www.microsoft.com/downloads/details.aspx?FamilyID=535fcf4a-eeb2 -44eb-b2a6-9c512509c49d

Microsoft Excel 2007 SP2

• Microsoft Security Update for Microsoft Office Excel 2007 (KB2553073)
  http://www.microsoft.com/downloads/details.aspx?familyid=498AC241-D728 -4944-ABAC-EC8444CA6418

Microsoft Office 2004 for Mac 0

• Microsoft Microsoft Office 2004 for Mac 11.6.5 Update
  http://www.microsoft.com/downloads/details.aspx?FamilyID=868f4d9f-3498 -4d59-a017-59204553889c

Microsoft Excel Viewer SP2

• Microsoft Security Update for Microsoft Office Excel Viewer (KB2553075)
  http://www.microsoft.com/downloads/details.aspx?familyid=F82CA5DA-A55A -487C-8170-46A40000C8E3

Microsoft Excel Array Indexing 'iax' Field Remote Code Execution Vulnerability

References:

• Microsoft Excel Homepage (Microsoft )
  
• Microsoft Excel Record Integer Signedness Vulnerability (iDefense)
  
• Microsoft Security Bulletin MS11-072 - Important (Microsoft)