Oval Definition:
oval:org.mitre.oval:def:2149
Revision Date
:
2012-05-28
Version
:
7
Title
:
Workspace Memory Corruption Vulnerability
Description
:
Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption.
Family
:
windows
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2007-3890
Platform(s)
:
Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows XP
Product(s)
:
Microsoft Excel
Definition Synopsis
Excel 2000
Microsoft Excel 2000 is installed
AND
the version of excel.exe is less than 9.0.0.8964
OR
Excel 2002
Microsoft Excel 2002 is installed
AND
the version of excel.exe is less than 10.0.6834.0
OR
Excel 2003
Microsoft Excel 2003 is installed
AND
the version of excel.exe is less than 11.0.8146.0
OR
Excel Viewer
Microsoft Excel Viewer 2003 is installed
AND
the version of xlview.exe is less than 11.0.8146.0
BACK