Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Производитель ПО
Наименование ПО
Microsoft Excel
(2000, 2000 SP3, 2002, 2002 SP3, 2003, 2003 SP2)
Microsoft Office
(2004 Mac, v. X Mac, WorkSuite 2004, WorkSuite 2005)
Microsoft Updates
(KB2264397, KB2264403, KB2344893, KB2345017, KB2466169, KB2502786, KB2541003, KB2541025, KB2553072, KB2596954, KB2597086, KB2687481, KB2810048, KB923618, KB925257, KB925523, KB925524, KB925525, KB930402, KB930403, KB933666, KB934445, KB934447, KB934453, KB934737, KB936507, KB936508, KB936511, KB936513, KB940596, KB940601, KB940602, KB940604, KB943889, KB943985, KB946976, KB946979, KB951548, KB951551, KB951582, KB951589, KB955461, KB955464, KB955466, KB955468, KB958372, KB958434, KB958435, KB958436, KB959964, KB959988, KB959993, KB959995, KB969680, KB969681, KB969683, KB969685, KB973471, KB973475, KB973484, KB978471, KB978474, KB982133, KB982299)
Описание
В Microsoft Excel имеется уязвимость удаленного запуска кода. Злоумышленник может воспользоваться данной уязвимостью при анализе файла и обработке искаженной записи приложением Excel.
Как исправить
Используйте рекомендации производителя:
http://www.microsoft.com/technet/security/Bulletin/MS07-002.mspx
http://www.microsoft.com/technet/security/Bulletin/MS07-002.mspx
Ссылки
MS (MS07-002): http://www.microsoft.com/technet/security/Bulletin/MS07-002.mspx
CERT-VN (VU#493185): http://www.kb.cert.org/vuls/id/493185
FRSIRT (ADV-2007-0103): http://www.frsirt.com/english/advisories/2007/0103
http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-30.html
http://www.fortinet.com/FortiGuardCenter/advisory/FGA-2007-01.html
BID (21952): http://www.securityfocus.com/bid/21952
CERT (TA07-009A): http://www.us-cert.gov/cas/techalerts/TA07-009A.html
HP (HPSBST02184): http://www.securityfocus.com/archive/1/archive/1/457274/100/0/threaded
OSVDB (31249): http://www.osvdb.org/31249
SECTRACK (1017485): http://securitytracker.com/id?1017485
CERT-VN (VU#493185): http://www.kb.cert.org/vuls/id/493185
FRSIRT (ADV-2007-0103): http://www.frsirt.com/english/advisories/2007/0103
http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-30.html
http://www.fortinet.com/FortiGuardCenter/advisory/FGA-2007-01.html
BID (21952): http://www.securityfocus.com/bid/21952
CERT (TA07-009A): http://www.us-cert.gov/cas/techalerts/TA07-009A.html
HP (HPSBST02184): http://www.securityfocus.com/archive/1/archive/1/457274/100/0/threaded
OSVDB (31249): http://www.osvdb.org/31249
SECTRACK (1017485): http://securitytracker.com/id?1017485