< Back to JetLib.com

jetlib.sec » Tags » microsoft-office-2007

« Expand/Collapse

12 items tagged "microsoft office 2007"

Related tags: zero day [+], zero [+], office [+], microsoft [+], memory corruption [+], day [+], application [+], excel [+], based buffer overflow [+], arbitrary code execution [+], code execution [+], xlb [+], safer use [+], record [+], code [+], buffer overflow [+], art shape [+]

January 02, 2012
19:14
Microsoft Office Graph DataFormat Signed Index Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office 2007.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code office microsoft microsoft-office-2007 code-execution safer-use

December 13, 2011
18:32
Zero Day Initiative Advisory 11-346
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-346 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office 2007. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the application processes a shape record hierarchy. Due to the application not properly checking the types of elements within containers, the application will incorrectly modify a property of the object. This modification can be used to cause memory corruption of the type which can lead to code execution under the context of the application.
Tags: day zero application memory-corruption microsoft-office-2007 zero-day

18:32
Zero Day Initiative Advisory 11-346
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-346 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office 2007. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the application processes a shape record hierarchy. Due to the application not properly checking the types of elements within containers, the application will incorrectly modify a property of the object. This modification can be used to cause memory corruption of the type which can lead to code execution under the context of the application.
Tags: day zero application memory-corruption microsoft-office-2007 zero-day

18:32
Zero Day Initiative Advisory 11-346
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-346 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office 2007. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the application processes a shape record hierarchy. Due to the application not properly checking the types of elements within containers, the application will incorrectly modify a property of the object. This modification can be used to cause memory corruption of the type which can lead to code execution under the context of the application.
Tags: day zero application memory-corruption microsoft-office-2007 zero-day

14:29
Zero Day Initiative Advisory 11-346
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-346 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office 2007. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the application processes a shape record hierarchy. Due to the application not properly checking the types of elements within containers, the application will incorrectly modify a property of the object. This modification can be used to cause memory corruption of the type which can lead to code execution under the context of the application.
Tags: day zero application memory-corruption microsoft-office-2007 zero-day

14:29
Zero Day Initiative Advisory 11-346
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-346 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office 2007. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the application processes a shape record hierarchy. Due to the application not properly checking the types of elements within containers, the application will incorrectly modify a property of the object. This modification can be used to cause memory corruption of the type which can lead to code execution under the context of the application.
Tags: day zero application memory-corruption microsoft-office-2007 zero-day

14:29
Zero Day Initiative Advisory 11-346
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-346 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office 2007. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the application processes a shape record hierarchy. Due to the application not properly checking the types of elements within containers, the application will incorrectly modify a property of the object. This modification can be used to cause memory corruption of the type which can lead to code execution under the context of the application.
Tags: day zero application memory-corruption microsoft-office-2007 zero-day

14:00
Bugtraq: ZDI-11-346 : Microsoft Office 2007 Office Art Shape Record Hierarchy Parsing Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

ZDI-11-346 : Microsoft Office 2007 Office Art Shape Record Hierarchy Parsing Remote Code Execution Vulnerability
Tags: office microsoft record art-shape microsoft-office-2007 code-execution

November 06, 2011
15:54
MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a vulnerability found in Excel of Microsoft Office 2007. By supplying a malformed .xlb file, an attacker can control the content (source) of a memcpy routine, and the number of bytes to copy, therefore causing a stack-based buffer overflow. This results in arbitrary code execution under the context of the user.
Tags: excel office microsoft arbitrary-code-execution based-buffer-overflow microsoft-office-2007

15:54
MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a vulnerability found in Excel of Microsoft Office 2007. By supplying a malformed .xlb file, an attacker can control the content (source) of a memcpy routine, and the number of bytes to copy, therefore causing a stack-based buffer overflow. This results in arbitrary code execution under the context of the user.
Tags: excel office microsoft arbitrary-code-execution based-buffer-overflow microsoft-office-2007

15:54
MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a vulnerability found in Excel of Microsoft Office 2007. By supplying a malformed .xlb file, an attacker can control the content (source) of a memcpy routine, and the number of bytes to copy, therefore causing a stack-based buffer overflow. This results in arbitrary code execution under the context of the user.
Tags: excel office microsoft arbitrary-code-execution based-buffer-overflow microsoft-office-2007

November 04, 2011
15:00
[local exploits] - MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow
» ‎ 1337day (was: Inj3ct0r, 1337db)

[local exploits] - MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow
Tags: excel office microsoft buffer-overflow microsoft-office-2007 xlb