Oval Definition:oval:org.mitre.oval:def:5556
Revision Date:2014-06-30Version:21
Title:File Format Parsing Vulnerability
Description:Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed formula, which triggers "pointer corruption" during the loading of formulas from this spreadsheet, aka "File Format Parsing Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2008-4264
Platform(s):Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft Excel 2000
Microsoft Excel 2002
Microsoft Excel 2003
Microsoft Excel 2007
Microsoft Office Compatibility Pack
Microsoft Office Excel Viewer
Microsoft Office Excel Viewer 2003
Definition Synopsis
  • Check for Vulnerable Excel 2000 and Excel.exe version
  • Microsoft Excel 2000 is installed
  • AND Excel.exe version is less than 9.0.0.8974
  • OR Check for Vulnerable Excel 2002 and Excel.exe version
  • Microsoft Excel 2002 is installed
  • AND Excel.exe version is less than 10.0.6850.0
  • OR Check for Vulnerable Excel 2003 and Excel.exe version
  • Microsoft Excel 2003 is installed
  • AND Excel.exe version is less than 11.0.8237.0
  • OR Check for Vulnerable Excel 2007 and Excel.exe version
  • Microsoft Excel 2007 is installed
  • AND Excel.exe version is less than 12.0.6331.5000
  • OR Check for Vulnerable Excel 2003 and Excel.exe version
  • Microsoft Excel Viewer 2003 is installed
  • AND Xlview.exe version is less than 11.0.8237.0
  • OR Check for Vulnerable Office Compatibility Pack and Excelcnv.exe version
  • Microsoft Office Compatibility Pack is installed
  • AND Excelcnv.exe version is less than 12.0.6331.5000
  • OR Check for Vulnerable Excel viewer 2007 and Xlview.exe version
  • Microsoft Excel Viewer 2007 is installed
  • AND Check if version of Xlview.exe is less than 12.0.6331.5000
  • BACK