Oval Definition:oval:org.mitre.oval:def:545
Revision Date:2012-05-28Version:7
Title:Microsoft Excel Malformed COLINFO record Vulnerability
Description:Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted COLINFO record, which triggers the overflow during a "data filling operation."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2006-1304
Platform(s):Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s):Microsoft Excel
Definition Synopsis
  • Excel 2000
  • Microsoft Excel 2000 is installed
  • AND the version of excel.exe is less than 9.0.0.8946
  • OR Excel 2002
  • Microsoft Excel 2002 is installed
  • AND the version of excel.exe is less than 10.0.6809.0
  • OR Excel 2003
  • Microsoft Excel 2003 is installed
  • AND the version of excel.exe is less than 11.0.8033.0
  • OR Excel Viewer
  • Microsoft Excel Viewer 2003 is installed
  • AND the version of xlview.exe is less than 11.0.8033.0.
  • BACK