Microsoft Excel 'MergeCells' Record Heap Overflow Remote Code Execution Vulnerability

Bugtraq ID:	53376
Class:	Unknown
CVE:	CVE-2012-0185
Remote:	Yes
Local:	No
Published:	May 08 2012 12:00AM
Updated:	Apr 19 2013 02:40AM
Credit:	Jun Mao
Vulnerable:	Microsoft Office 2010 (64-bit edition) SP1 Microsoft Office 2010 (64-bit edition) 0 Microsoft Office 2010 (32-bit edition) 0 Microsoft Office 2010 (32-bit edition) SP1 Microsoft Office 2007 SP3 Microsoft Excel 2010 SP1 Microsoft Excel 2010 0 Microsoft Excel 2007 SP3 Microsoft Excel 2007 SP2
Not Vulnerable:

Microsoft Excel 'MergeCells' Record Heap Overflow Remote Code Execution Vulnerability

Microsoft Excel is prone to a remote code-execution vulnerability.

Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel ('.xls') file.

Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the application. Failed exploits will result in denial-of-service conditions.

Microsoft Excel 'MergeCells' Record Heap Overflow Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Microsoft Excel 'MergeCells' Record Heap Overflow Remote Code Execution Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.


Microsoft Excel 2007 SP3

• Microsoft Security Update for Microsoft Office Excel 2007 (KB2597161)
  http://www.microsoft.com/downloads/details.aspx?familyid=22b9b3a6-ad09 -4397-892c-2190a86baf3e

Microsoft Office 2007 SP3

• Microsoft Security Update for Microsoft Office 2007 suites (KB2597969)
  http://www.microsoft.com/downloads/details.aspx?familyid=6ff6650c-eaf4 -4c7d-986c-c4d9e5324dac

Microsoft Excel 2007 SP2

• Microsoft Security Update for Microsoft Office Excel 2007 (KB2597161)
  http://www.microsoft.com/downloads/details.aspx?familyid=22b9b3a6-ad09 -4397-892c-2190a86baf3e

Microsoft Office 2010 (32-bit edition) SP1

• Microsoft Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=2e1060fa-c43d -42df-be5f-f536d9b39ba4

Microsoft Excel 2010 SP1

• Microsoft Security Update for Microsoft Excel 2010 (KB2597166) 32-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=f537f6d0-be63 -42af-8b39-fa6f38715f84


• Microsoft Security Update for Microsoft Excel 2010 (KB2597166) 64-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=123b96d9-de3f -4aab-bcf8-bf9089fef400

Microsoft Excel 2010 0

• Microsoft Security Update for Microsoft Excel 2010 (KB2597166) 32-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=f537f6d0-be63 -42af-8b39-fa6f38715f84


• Microsoft Security Update for Microsoft Excel 2010 (KB2597166) 64-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=123b96d9-de3f -4aab-bcf8-bf9089fef400

Microsoft Office 2010 (64-bit edition) SP1

• Microsoft Security Update for Microsoft Office 2010 (KB2553371) 64-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=ec4371f6-644d -430d-880f-12425f1b36d4

Microsoft Office 2010 (64-bit edition) 0

• Microsoft Security Update for Microsoft Office 2010 (KB2553371) 64-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=ec4371f6-644d -430d-880f-12425f1b36d4

Microsoft Office 2010 (32-bit edition) 0

• Microsoft Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=2e1060fa-c43d -42df-be5f-f536d9b39ba4

Microsoft Excel 'MergeCells' Record Heap Overflow Remote Code Execution Vulnerability

References:

• Microsoft Excel Homepage (Microsoft )
  
• Microsoft Security Bulletin MS12-030 (Microsoft)