CVE-2008-0115

Related Files

iDEFENSE Security Advisory 2008-03-11.2

Posted Mar 13, 2008

Authored by iDefense Labs | Site idefense.com

iDefense Security Advisory 03.11.08 - Remote exploitation of a memory corruption vulnerability in Microsoft Corp.'s Excel 2003 could allow attackers to execute arbitrary code in the context of the currently logged on user. This vulnerability specifically exists due to the improper handling of malformed formulas. By creating a document containing a specially crafted formula, an attacker is able to cause memory corruption that leads to arbitrary code execution. iDefense has confirmed the existence of this vulnerability in Excel 2003 SP2. Other versions may also be affected.

tags | advisory, remote, arbitrary, code execution

advisories | CVE-2008-0115

SHA-256 | f4e45a1af3d8b4ea59a40e602ea77eb18b0fe56f6d631339417be9ea8976a6e4

Download | Favorite | View