CVE-2009-1134

Related Files

Zero Day Initiative Advisory 09-040

Posted Jun 10, 2009

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 09-040 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. Exploitation requires user interaction in that a victim must open a malicious XLS file. The specific flaw exists within the parsing of the BIFF file format used by Microsoft Excel. When Excel 2007 encounters a malformed Qsir record (0x806) user data is improperly handled leading to potential code execution. Successful exploitation of this can lead to a remote compromise of the affected system running under the credentials of the currently logged in user.

tags | advisory, remote, arbitrary, code execution

advisories | CVE-2009-1134

SHA-256 | 205d1a229b3b5f56b3a50cddfa4367c291b7f6f22b48710bdeed66463b23f120

Download | Favorite | View