Многочисленные уязвимости безопасности в Microsoft Office / Excel / Outlook / Web Components дополнено с 12 марта 2008 г.
Опубликовано:		22 марта 2008 г.
Источник:		MICROSOFT
SecurityVulns ID:		8773
Тип:		клиент
Опасность:		8/10
Описание:		Многочисленные уязвимости в Microsoft Excel, выполнение кода через mailto: URI в Outlook, повреждения памяти в Microsoft Office, многочисленные уязвимости в Microsoft Office Web components.

CVE:		CVE-2008-0118
		CVE-2008-0117
		CVE-2008-0116
		CVE-2008-0115
		CVE-2008-0114
		CVE-2008-0113 (Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an "allocation error," aka "Microsoft Office Cell Parsing Memory Corruption Vulnerability.")
		CVE-2008-0112
		CVE-2008-0111
		CVE-2008-0110
		CVE-2008-0081
		CVE-2007-1201
		CVE-2006-4695 (Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via a crafted URL, aka "Office Web Components URL Parsing Vulnerability.")

Оригинальный текст		IDEFENSE, [Full-disclosure] iDefense Security Advisory 03.11.08: Microsoft Outlook mailto Command Line Switch Injection (12.03.2008)
		IDEFENSE, [Full-disclosure] iDefense Security Advisory 03.11.08: Microsoft Excel 2003 Malformed Formula Memory Corruption Vulnerability (12.03.2008)
		IDEFENSE, [Full-disclosure] iDefense Security Advisory 03.11.08: Microsoft Excel DVAL Heap Corruption Vulnerability (12.03.2008)
		ZDI, ZDI-08-008: Microsoft Excel BIFF File Format Cell Record Parsing Memory Corruption Vulnerability (12.03.2008)
		DVLabs, TPTI-08-03: Microsoft Excel Rich Text Memory Corruption Vulnerability (12.03.2008)
		MICROSOFT, Microsoft Security Bulletin MS08-017 - Critical Vulnerabilities in Microsoft Office Web Components Could Allow Remote Code Execution (933103) (12.03.2008)
		MICROSOFT, Microsoft Security Bulletin MS08-016 – Critical Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (949030) (12.03.2008)
		MICROSOFT, Microsoft Security Bulletin MS08-015 - Critical Vulnerability in Microsoft Outlook Could Allow Remote Code Execution (949031) (12.03.2008)
		MICROSOFT, Microsoft Security Bulletin MS08-014 - Critical Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (949029) (12.03.2008)

Файлы:		MS08-014 exploit
		Microsoft Security Bulletin MS08-016 – Critical Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (949030)
		Microsoft Security Bulletin MS08-017 - Critical Vulnerabilities in Microsoft Office Web Components Could Allow Remote Code Execution (933103)
		Microsoft Security Bulletin MS08-014 - Critical Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (949029)
		Microsoft Security Bulletin MS08-015 - Critical Vulnerability in Microsoft Outlook Could Allow Remote Code Execution (949031)
Обсудить:		Прочитать или оставить комментарии к новости (0 комментариев)