Microsoft Excel CVE-2012-2543 Buffer Overflow Remote Code Execution Vulnerability

Bugtraq ID:	56431
Class:	Boundary Condition Error
CVE:	CVE-2012-2543
Remote:	Yes
Local:	No
Published:	Nov 13 2012 12:00AM
Updated:	Apr 19 2013 02:40AM
Credit:	An anonymous researcher, working with HP TippingPoint's Zero Day Initiative
Vulnerable:	Microsoft Office Compatibility Pack SP3 Microsoft Office Compatibility Pack SP2 Microsoft Office 2011 for Mac 0 Microsoft Office 2010 (64-bit edition) SP1 Microsoft Office 2010 (64-bit edition) 0 Microsoft Office 2010 (32-bit edition) 0 Microsoft Office 2010 (32-bit edition) SP1 Microsoft Office 2008 for Mac 0 Microsoft Office 2007 SP3 Microsoft Excel Viewer 0 Microsoft Excel 2010 SP1 Microsoft Excel 2010 0 Microsoft Excel 2007 SP3 Microsoft Excel 2007 SP2 Microsoft Excel 2003 SP3 Microsoft Excel 2003 SP2 Microsoft Excel 2003 SP1 + Microsoft Office 2003 SP1 Microsoft Excel 2003 + Microsoft Office 2003 0
Not Vulnerable:

Microsoft Excel CVE-2012-2543 Buffer Overflow Remote Code Execution Vulnerability

Microsoft Excel is prone to a remote code-execution vulnerability.

Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel ('.xls') file.

Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the application. Failed exploits will result in denial-of-service conditions.

Microsoft Excel CVE-2012-2543 Buffer Overflow Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Microsoft Excel CVE-2012-2543 Buffer Overflow Remote Code Execution Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.

Microsoft Excel CVE-2012-2543 Buffer Overflow Remote Code Execution Vulnerability

References:

• Microsoft Excel Homepage (Microsoft )