Microsoft Office Excel CVE-2012-5672 Denial of Service Vulnerability

Bugtraq ID:	56309
Class:	Unknown
CVE:	CVE-2012-5672
Remote:	Yes
Local:	No
Published:	Oct 11 2012 12:00AM
Updated:	Oct 11 2012 12:00AM
Credit:	Jean Pascal Pereira
Vulnerable:	Microsoft Office 2007 0 + Microsoft Access 2007 0 + Microsoft Access 2007 0 + Microsoft Excel 2003 + Microsoft Excel 2007 0 + Microsoft Excel 2007 0 + Microsoft FrontPage 2003 + Microsoft Groove 2007 0 + Microsoft Groove 2007 0 + Microsoft InfoPath 2003 + Microsoft InfoPath 2007 0 + Microsoft InfoPath 2007 0 + Microsoft Office Communicator 2007 0 + Microsoft Office Communicator 2007 0 + Microsoft OneNote 2003 0 + Microsoft Outlook 2003 0 + Microsoft Outlook 2007 0 + Microsoft Outlook 2007 0 + Microsoft PowerPoint 2003 0 + Microsoft PowerPoint 2007 0 + Microsoft PowerPoint 2007 0 + Microsoft Project Professional 2007 0 + Microsoft Project Professional 2007 0 + Microsoft Project Standard 2007 0 + Microsoft Project Standard 2007 0 + Microsoft Publisher 2003 + Microsoft Publisher 2007 0 + Microsoft Publisher 2007 0 + Microsoft SharePoint Designer 2007 0 + Microsoft SharePoint Designer 2007 0 + Microsoft Visio Professional 2007 0 + Microsoft Visio Professional 2007 0 + Microsoft Visio Standard 2007 0 + Microsoft Visio Standard 2007 0
Not Vulnerable:

Microsoft Office Excel CVE-2012-5672 Denial of Service Vulnerability

Microsoft Office is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to crash the affected application. Due to the nature of the issue code execution might be possible, but it has not been confirmed.

Microsoft Office 2007 is affected; other versions may also be vulnerable.

Microsoft Office Excel CVE-2012-5672 Denial of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/56309.pl

Microsoft Office Excel CVE-2012-5672 Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

Microsoft Office Excel CVE-2012-5672 Denial of Service Vulnerability

References:

• Microsoft Excel Homepage (Microsoft )
  
• Microsoft Office Excel ReadAV Arbitrary Code Execution (Jean Pascal Pereira)