Microsoft Excel 2000 through 2004 allows user-assisted malicious users to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka "Malformed OBJECT record Vulnerability."
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
microsoft excel 2000 |
||
microsoft excel 2002 |
||
microsoft excel 2003 |
||
microsoft excel 2004 |
||
microsoft excel x |
||
microsoft excel viewer 2003 |