[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249982

 
 

909

 
 

195748

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Calendar Object Validation Vulnerability

ID: oval:org.mitre.oval:def:5870Date: (C)2008-10-14   (M)2023-12-14
Class: VULNERABILITYFamily: windows




Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 does not properly validate data in the VBA Performance Cache when processing an Office document with an embedded object, which allows remote attackers to execute arbitrary code via an Excel file containing a crafted value, leading to heap-based buffer overflows, integer overflows, array index errors, and memory corruption, aka "Calendar Object Validation Vulnerability."

Platform:
Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Microsoft Windows XP
Microsoft Windows Server 2008 R2
Product:
Microsoft Excel 2000
Microsoft Excel 2002
Microsoft Excel 2003
Reference:
CVE-2008-3477
CVE    1
CVE-2008-3477
CPE    4
cpe:/a:microsoft:excel:2003:sp3
cpe:/a:microsoft:excel:2000
cpe:/a:microsoft:excel:2002
cpe:/a:microsoft:excel:2003
...

© SecPod Technologies