Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service (application crash) via a file with a (1) corrupted XML format or a (2) corrupted XLS format, which triggers a NULL pointer dereference.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Excel | Microsoft | 2003 (including) | 2003 (including) |
| Excel | Microsoft | 2003-sp1 (including) | 2003-sp1 (including) |
| Excel | Microsoft | 2003-sp2 (including) | 2003-sp2 (including) |