Month Of Abysssec Undisclosed Bugs - Microsoft Excel suffers from a HFPicture record parsing remote code execution vulnerability.
c8317b618b559161ccaf7f9ee4188be27b7cbbcdf5579bf645e1121c79da4c9c
Month Of Abysssec Undisclosed Bugs - Microsoft Excel suffers from a HFPicture record parsing remote code execution vulnerability. Proof of concept included.
a8f9182f3783ec753cac62e079bcefc7b828745d62af1e75d3f8a5ce669f1ee6
VUPEN Vulnerability Research Team discovered a critical vulnerability affecting Microsoft Office Excel. The vulnerability is caused by a buffer overflow error when processing malformed HFPicture (recType 0x866) records, which could be exploited by attackers to execute arbitrary code by tricking a user into opening a specially crafted Excel document.
c42e282c333ee7179a1abb732fa303b2cd18cbd6de3e31d6152da91b3a5c206b