Microsoft Excel Memory Corruption CVE-2012-0143 Remote Code Execution Vulnerability

Bugtraq ID:	53374
Class:	Unknown
CVE:	CVE-2012-0143
Remote:	Yes
Local:	No
Published:	May 08 2012 12:00AM
Updated:	May 08 2012 12:00AM
Credit:	Microsoft
Vulnerable:	Microsoft Excel 2008 for Mac 0 Microsoft Excel 2003 SP3 Microsoft Excel 2003 SP2 Microsoft Excel 2003 SP1 + Microsoft Office 2003 SP1
Not Vulnerable:

Microsoft Excel Memory Corruption CVE-2012-0143 Remote Code Execution Vulnerability

Microsoft Excel is prone to a remote code-execution vulnerability due to a memory-corruption error.

Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel file.

Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the affected application. Failed exploit attempts will likely result in a denial-of-service condition.

Microsoft Excel Memory Corruption CVE-2012-0143 Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Microsoft Excel Memory Corruption CVE-2012-0143 Remote Code Execution Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.


Microsoft Excel 2003 SP3

• Microsoft Security Update for Microsoft Office Excel 2003 (KB2597086)
  http://www.microsoft.com/downloads/details.aspx?familyid=162901b1-4c1d -476f-99e9-218780897f92

Microsoft Excel Memory Corruption CVE-2012-0143 Remote Code Execution Vulnerability

References:

• Microsoft Excel Homepage (Microsoft )
  
• Microsoft Security Bulletin MS12-030 (Microsoft)