漏洞信息详情
Microsoft Excel MDXTuple和ContinueFRT12记录堆溢出漏洞
- CNNVD编号:CNNVD-201003-145
- 危害等级: 超危
- CVE编号: CVE-2010-0260
- 漏洞类型: 代码注入
- 发布时间: 2010-03-10
- 威胁类型: 远程
- 更新时间: 2010-03-11
- 厂 商: microsoft
- 漏洞来源: Sean Larsson
漏洞简介
Excel是微软Office套件中的电子表格工具。
Excel在解析XSL文件中畸形MDXTuple记录时存在堆溢出漏洞。远程攻击可以借助一个特制的电子表格,成功地利用此漏洞,完全控制受影响的系统,导致任意代码执行。
漏洞公告
目前厂商已经发布了升级补丁以修复这个安全问题,补丁下载链接:
Microsoft Excel Viewer SP1
Microsoft Security Update for Microsoft Office Excel Viewer (KB978383)
http://www.microsoft.com/downloads/details.aspx?familyid=010D0A4D-02A4 -4142-963B-A38CD06CC897
Microsoft Excel 2007 SP1
Microsoft Security Update for Microsoft Office Excel 2007 (KB978382)
http://www.microsoft.com/downloads/details.aspx?familyid=03429F8A-8AAB -4A59-97E4-7CE047F100A5
Microsoft Excel 2007 SP2
Microsoft Security Update for Microsoft Office Excel 2007 (KB978382)
http://www.microsoft.com/downloads/details.aspx?familyid=03429F8A-8AAB -4A59-97E4-7CE047F100A5
Microsoft Office Compatibility Pack 2007 SP2
Microsoft Security Update for the 2007 Microsoft Office System (KB978380)
http://www.microsoft.com/downloads/details.aspx?familyid=314F076E-8F9D -46C2-B666-86599A02BF15
Microsoft Excel Viewer SP2
Microsoft Security Update for Microsoft Office Excel Viewer (KB978383)
http://www.microsoft.com/downloads/details.aspx?familyid=010D0A4D-02A4 -4142-963B-A38CD06CC897
Microsoft Office Compatibility Pack 2007 SP1
Microsoft Security Update for the 2007 Microsoft Office System (KB978380)
http://www.microsoft.com/downloads/details.aspx?familyid=314F076E-8F9D -46C2-B666-86599A02BF15
参考网址
来源: MS
名称: MS10-017
链接:http://www.microsoft.com/technet/security/Bulletin/MS10-017.mspx
来源:NSFOCUS 名称:14609 链接:http://www.nsfocus.net/vulndb/14609
受影响实体
- Microsoft Office_excel_viewer:Sp1
- Microsoft Office_excel_viewer:Sp2
- Microsoft Office_sharepoint_server:2007:Sp2:X64
- Microsoft Office_sharepoint_server:2007:Sp1:X64
- Microsoft Office_sharepoint_server:2007:Sp2:X32
补丁
暂无
评论