漏洞信息详情
Microsoft Excel BIFF文件格式解析栈溢出漏洞
- CNNVD编号：CNNVD-200810-248
- 危害等级： 超危
- CVE编号： CVE-2008-3471
- 漏洞类型： 缓冲区错误
- 发布时间： 2008-10-15
- 威胁类型： 远程
- 更新时间： 2022-02-11
- 厂 商： microsft
- 漏洞来源： wushi wooshi@gmail...
漏洞简介
Excel是微软Office办公套件中的电子表格工具。
Excel在解析BIFF文件格式时使用文件中记录的内容计算拷贝用户提供数据的栈缓冲区的大小，远程攻击者在记录中设置了特制的记录值，可能触发栈溢出，导致执行任意指令。
漏洞公告
目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：
Microsoft Office 2008 for Mac 0
Microsoft Microsoft Office 2008 for Mac 12.1.3 Update
http://www.microsoft.com/downloads/details.aspx?FamilyId=E70C5AE0-2858 -46DE-81F8-DCD1786656B7
Microsoft Excel 2003 SP3
Microsoft Security Update for Microsoft Office Excel 2003 (KB955466)
http://www.microsoft.com/downloads/details.aspx?FamilyId=4df27e8a-d803 -483b-a700-0177d71bf368
Microsoft Excel Viewer 0
Microsoft Security Update for Microsoft Office Excel Viewer (KB955935)
http://www.microsoft.com/downloads/details.aspx?FamilyId=83c88444-75b8 -44d1-b280-3671394ade45
Microsoft Office Compatibility Pack 2007 SP1
Microsoft Security Update for 2007 Microsoft Office System (KB955936)
http://www.microsoft.com/downloads/details.aspx?FamilyId=9a7be004-5903 -4101-90c5-c0d5f8722af9
Microsoft Open XML File Format Converter for Mac 0
Microsoft Open XML File Format Converter for Mac 1.0.1
http://www.microsoft.com/downloads/details.aspx?FamilyId=2A8D9A3B-B8A4 -43B6-82A6-A2E7D16AE11D
Microsoft Excel 2007 0
Microsoft Security Update for Microsoft Office Excel 2007 (KB955470)
http://www.microsoft.com/downloads/details.aspx?FamilyId=2765bbc0-ea2e -4b6e-822c-222ee8e5021f
Microsoft Excel 2007 SP1
Microsoft Security Update for Microsoft Office Excel 2007 (KB955470)
http://www.microsoft.com/downloads/details.aspx?FamilyId=2765bbc0-ea2e -4b6e-822c-222ee8e5021f
Microsoft Excel 2003 SP2
Microsoft Security Update for Microsoft Office Excel 2003 (KB955466)
http://www.microsoft.com/downloads/details.aspx?FamilyId=4df27e8a-d803 -483b-a700-0177d71bf368
Microsoft Excel 2002 SP3
Microsoft Security Update for Microsoft Excel 2002 (KB955464)
http://www.microsoft.com/downloads/details.aspx?FamilyId=27cedef1-c47c -472c-a343-cd9b4ebc2bba
Microsoft Office 2004 for Mac 0
Microsoft Microsoft Office 2004 for Mac 11.5.2 Update
http://www.microsoft.com/downloads/details.aspx?FamilyId=BA4FA21A-7E01 -4EF8-9B9F-9D51D00EF094
Microsoft Excel Viewer 2003 SP3
Microsoft Security Update for Microsoft Office Excel Viewer 2003 (KB955468)
http://www.microsoft.com/downloads/details.aspx?FamilyId=9769ce08-5207 -4c63-b7b9-536266ad6b2b
Microsoft Office Compatibility Pack 2007 0
Microsoft Security Update for 2007 Microsoft Office System (KB955936)
http://www.microsoft.com/downloads/details.aspx?FamilyId=9a7be004-5903 -4101-90c5-c0d5f8722af9
Microsoft Excel 2000 SP3
Microsoft Security Update for Microsoft Excel 2000 (KB955461)
http://www.microsoft.com/downloads/details.aspx?FamilyId=1b2740e0-ecdd -48ca-84e0-eb187c31eb16
Microsoft Office Excel Viewer 2003 SP3
Microsoft Security Update for Microsoft Office Excel Viewer 2003 (KB955468)
http://www.microsoft.com/downloads/details.aspx?FamilyId=9769ce08-5207 -4c63-b7b9-536266ad6b2b
Microsoft Excel Viewer 2003 0
Microsoft Security Update for Microsoft Office Excel Viewer 2003 (KB955468)
http://www.microsoft.com/downloads/details.aspx?FamilyId=9769ce08-5207 -4c63-b7b9-536266ad6b2b
参考网址
来源:SECUNIA
链接:http://secunia.com/advisories/32211
来源:BID
链接:https://www.securityfocus.com/bid/31705
来源:CERT
链接:http://www.us-cert.gov/cas/techalerts/TA08-288A.HTML
来源:HP
链接:http://marc.info/?l=bugtraq&m=122479227205998&w=2
来源:XF
链接:https://exchange.xforce.ibmcloud.com/vulnerabilities/45579
来源:VUPEN
链接:http://www.vupen.com/english/advisories/2008/2808
来源:MISC
链接:http://www.zerodayinitiative.com/advisories/ZDI-08-068/
来源:XF
链接:https://exchange.xforce.ibmcloud.com/vulnerabilities/45581
来源:SECTRACK
链接:http://www.securitytracker.com/id?1021044
来源:MS
链接:https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-057
来源:OVAL
链接:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5750
受影响实体
- Microsft Open_xml_file_format_converter:Unknown:Mac
补丁
暂无
评论