Excel Parsing Flaw in Microsoft Products Allows Remote Code Execution

CVE-2011-1279

Summary

A vulnerability exists in Microsoft Excel and its associated products due to improper validation of record information during the parsing of Excel spreadsheets. This flaw allows remote attackers to craft malicious spreadsheets that, when opened, can execute arbitrary code on the victim's system or lead to a denial of service through memory corruption. Affected versions include Microsoft Excel 2002 SP3, 2003 SP3, Office 2004 and 2008 for Mac, as well as the Open XML File Format Converter for Mac. It is crucial for users of these products to apply the necessary security updates to mitigate the risk.

References