Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service (application crash) via a file with a (1) corrupted XML format or a (2) corrupted XLS format, which triggers a NULL pointer dereference.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Excel | Microsoft | 2003 (including) | 2003 (including) |
| Excel | Microsoft | 2003-sp1 (including) | 2003-sp1 (including) |
| Excel | Microsoft | 2003-sp2 (including) | 2003-sp2 (including) |
References
- http://securityvulns.com/news/Microsoft/Excel/XML/DoS.html
- http://www.securityfocus.com/archive/1/461373/100/0/threaded
- http://www.securityfocus.com/bid/22717
- http://securityvulns.com/news/Microsoft/Excel/XML/DoS.html
- http://www.securityfocus.com/archive/1/461373/100/0/threaded
- http://www.securityfocus.com/bid/22717