漏洞信息详情
Microsoft Excel MDXSet和ContinueFRT12记录堆溢出漏洞
- CNNVD编号:CNNVD-201003-146
- 危害等级: 超危
- CVE编号: CVE-2010-0261
- 漏洞类型: 缓冲区溢出
- 发布时间: 2010-03-10
- 威胁类型: 远程
- 更新时间: 2010-03-11
- 厂 商: microsoft
- 漏洞来源: Sean Larsson
漏洞简介
Excel是微软Office套件中的电子表格工具。
Excel在解析XSL文件中畸形MDXSet记录时存在堆溢出漏洞,远程攻击者成功地利用此漏洞,可以完全控制受影响的系统,导致任意代码执行。
漏洞公告
目前厂商已经发布了升级补丁以修复这个安全问题,补丁下载链接:
Microsoft Office Compatibility Pack 2007 SP2
Microsoft Security Update for the 2007 Microsoft Office System (KB978380)
http://www.microsoft.com/downloads/details.aspx?familyid=314F076E-8F9D -46C2-B666-86599A02BF15
Microsoft Excel 2007 SP1
Microsoft Security Update for Microsoft Office Excel 2007 (KB978382)
http://www.microsoft.com/downloads/details.aspx?familyid=03429F8A-8AAB -4A59-97E4-7CE047F100A5
Microsoft Excel 2007 SP2
Microsoft Security Update for Microsoft Office Excel 2007 (KB978382)
http://www.microsoft.com/downloads/details.aspx?familyid=03429F8A-8AAB -4A59-97E4-7CE047F100A5
Microsoft Office Compatibility Pack 2007 SP1
Microsoft Security Update for the 2007 Microsoft Office System (KB978380)
http://www.microsoft.com/downloads/details.aspx?familyid=314F076E-8F9D -46C2-B666-86599A02BF15
参考网址
来源: MS
名称: MS10-017
链接:http://www.microsoft.com/technet/security/Bulletin/MS10-017.mspx
来源:NSFOCUS 名称:14612 链接:http://www.nsfocus.net/vulndb/14612
受影响实体
- Microsoft Office_sharepoint_server:2007:Sp2:X64
- Microsoft Office_sharepoint_server:2007:Sp1:X64
- Microsoft Office_sharepoint_server:2007:Sp2:X32
- Microsoft Office_sharepoint_server:2007:Sp1:X32
- Microsoft Office_compatibility_pack:2007:Sp2
补丁
暂无
评论