CVE-2007-1214

Related Files

iDEFENSE Security Advisory 2007-05-08.2

Posted May 10, 2007

Authored by iDefense Labs, Greg MacManus | Site idefense.com

iDefense Security Advisory 05.08.07 - Remote exploitation of an input validation error in the handling of AutoFilter records in Excel BIFF8 format spreadsheet files by Microsoft Corp.'s Excel 2003 could allow an attacker to execute arbitrary code in the context of the current user. The AutoFilter feature of Excel allows data not matching a specified criteria to be filtered out. By creating a document containing a specially crafted filter record, an attacker is able to cause an invalid memory access leading to arbitrary code execution. iDefense has confirmed Microsoft Excel 2003 is vulnerable. Previous versions are also likely to be affected. Excel 2007 does not appear to be vulnerable.

tags | advisory, remote, arbitrary, code execution

advisories | CVE-2007-1214

SHA-256 | 75710def3d9c5022a17b416ac6a211ffd7e4f5fb82a2f997d69c714db1c01853

Download | Favorite | View