Microsoft Excel Conditional Expression CVE-2011-1989 Remote Code Execution Vulnerability

Bugtraq ID:	49518
Class:	Unknown
CVE:	CVE-2011-1989
Remote:	Yes
Local:	No
Published:	Sep 13 2011 12:00AM
Updated:	Oct 17 2011 05:11PM
Credit:	An anonymous researcher, working with TippingPoint's Zero Day Initiative
Vulnerable:	Microsoft Open Xml File Format Converter Mac Microsoft Office Compatibility Pack 2007 SP2 Microsoft Office Compatibility Pack 2007 SP1 Microsoft Office Compatibility Pack 2007 0 Microsoft Office 2011 for Mac SP1 Microsoft Office 2011 for Mac 0 Microsoft Office 2008 for Mac 0 Microsoft Office 2004 for Mac 0 Microsoft Excel Web App 0 Microsoft Excel Viewer SP2 Microsoft Excel Services installed on Microsoft Office SharePoint Server 2 SP2 Microsoft Excel Services installed on Microsoft Office SharePoint Server 2 SP1 Microsoft Excel Services installed on Microsoft Office SharePoint Server 2 0 Microsoft Excel 2010 0 Microsoft Excel 2007 SP2 Microsoft Excel 2007 SP1 Microsoft Excel 2007 0 Microsoft Excel 2003 SP3 Microsoft Excel 2003 SP2 Microsoft Excel 2003 SP1 + Microsoft Office 2003 SP1 Microsoft Excel 2003 + Microsoft Office 2003 0
Not Vulnerable:

Microsoft Excel Conditional Expression CVE-2011-1989 Remote Code Execution Vulnerability

Microsoft Excel is prone to a remote code-execution vulnerability.

Attackers could exploit this issue by enticing victims to open a maliciously crafted Excel file.

Successful exploits will allow attackers to execute arbitrary code with the privileges of the user running the application.

Microsoft Excel Conditional Expression CVE-2011-1989 Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Excel Conditional Expression CVE-2011-1989 Remote Code Execution Vulnerability

Solution:
The vendor has released an update. Please see the references for details.


Microsoft Office 2008 for Mac 0

• Microsoft Microsoft Office 2008 for Mac 12.3.1 Update
  http://www.microsoft.com/downloads/details.aspx?FamilyID=afa79cfc-6e8a -4d0b-88aa-0d7e05031e44

Microsoft Excel 2003 SP3

• Microsoft Security Update for Microsoft Office Excel 2003 (KB2553072)
  http://www.microsoft.com/downloads/details.aspx?familyid=DEE4F3D7-BC4B -47FD-8E3F-9D2B0E82D0F6

Microsoft Office Compatibility Pack 2007 SP2

• Microsoft Security Update for the 2007 Microsoft Office System (KB2553074)
  http://www.microsoft.com/downloads/details.aspx?familyid=01093F22-06B7 -4C9B-BFF9-F54AC5D73BF8

Microsoft Excel 2010 0

• Microsoft Security Update for Microsoft Excel 2010 (KB2553070), 32-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=4612C6E4-AC29 -4CC4-9DA5-88779EA3643E


• Microsoft Security Update for Microsoft Excel 2010 (KB2553070), 64-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=D40DB27B-1318 -4CA7-B44F-C90BB6342109

Microsoft Office 2011 for Mac 0

• Microsoft Microsoft Office 2011 14.1.3 Update
  http://www.microsoft.com/downloads/details.aspx?FamilyID=535fcf4a-eeb2 -44eb-b2a6-9c512509c49d

Microsoft Excel 2007 SP2

• Microsoft Security Update for Microsoft Office Excel 2007 (KB2553073)
  http://www.microsoft.com/downloads/details.aspx?familyid=498AC241-D728 -4944-ABAC-EC8444CA6418

Microsoft Office 2004 for Mac 0

• Microsoft Microsoft Office 2004 for Mac 11.6.5 Update
  http://www.microsoft.com/downloads/details.aspx?FamilyID=868f4d9f-3498 -4d59-a017-59204553889c

Microsoft Excel Viewer SP2

• Microsoft Security Update for Microsoft Office Excel Viewer (KB2553075)
  http://www.microsoft.com/downloads/details.aspx?familyid=F82CA5DA-A55A -487C-8170-46A40000C8E3

Microsoft Excel Conditional Expression CVE-2011-1989 Remote Code Execution Vulnerability

References:

• Microsoft Excel Homepage (Microsoft )
  
• Microsoft Office Excel Conditional Expression Ptg Type Confusion Vulnerability (TippingPoint Zero Day Initiative)
  
• Microsoft Security Bulletin MS11-072 - Important (Microsoft)