The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbitrary files using the SaveAs capability.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Office | Microsoft | xp (including) | xp (including) |
References
- http://online.securityfocus.com/archive/1/265087
- http://www.guninski.com/m%24oxp-2.html
- http://www.securityfocus.com/bid/4398
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8711
- http://online.securityfocus.com/archive/1/265087
- http://www.guninski.com/m%24oxp-2.html
- http://www.securityfocus.com/bid/4398
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8711