Microsoft Office Excel 2010 Memory Corruption Denial of Service Vulnerability

Bugtraq ID:	56304
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Oct 29 2012 12:00AM
Updated:	Oct 29 2012 12:00AM
Credit:	coolkaveh
Vulnerable:	Microsoft Excel 2010 0
Not Vulnerable:

Microsoft Office Excel 2010 Memory Corruption Denial of Service Vulnerability

Microsoft Office Excel 2010 is prone to a remote memory-corruption vulnerability.

Attackers can exploit this issue to crash the affected application. Due to the nature of the issue code execution might be possible, but it has not been confirmed.

Microsoft Office Excel 2010 is affected; other versions may also be vulnerable.

Microsoft Office Excel 2010 Memory Corruption Denial of Service Vulnerability

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

Microsoft Office Excel 2010 Memory Corruption Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

Microsoft Office Excel 2010 Memory Corruption Denial of Service Vulnerability

References:

• Microsoft Excel Homepage (Microsoft )