Content

(MS09-021) Microsoft Office Excel String Copy Stack-Based Overrun Vulnerability (969462)

Type
Buffer Overflow
Impact of exploitation
Remote Code Execution
User Interaction
user interaction is needed
Attack Vector
Maliciously Crafted File
Rating
Medium
CVE reference
CVE-2009-0559,
Vendor Status
Responded and patched
Vulnerable systems
Excel  2000 SP3,
Excel  2002 SP3,
Summary
A vulnerability in Microsoft Office Excel may allow or remote code execution attacks.

Tab Navigation

Description

A vulnerability in Microsoft Office Excel may allow or remote code execution attacks. The flaw is specific to the improper parsing of the Excel spreadsheet file format. Exploitation can be achieved via a specially-crafted Excel file. Upon exploitation an attacker can gain full control of a compromised system.

McAfee Product Mitigation & Recommendations

Recommendations

The vendor has released a patch to address this issue: http://www.microsoft.com/technet/security/bulletin/ms09-021.mspx

McAfee Product Mitigation

McAfee Foundstone
Signature:
(MS09-021) Microsoft Office Excel String Copy Stack-Based Overrun Vulnerability (969462)
Signature identifier:
6760
Release date:
6/9/2009
McAfee Intrushield
Signature:
HTTP: Microsoft Office Excel String Copy Stack-Based Overrun Vulnerability
Signature identifier:
0x40260100
Release date:
6/9/2009
First released in:
4.1.51, 5.1.21

The Remedy V-Flash of June 10 contains remedies.

Release date:
6/10/2009

Additional Resources

Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (969462)

http://www.microsoft.com/technet/security/bulletin/ms09-021.mspx

All Information

Timeline -

6/9/2009

Vendor has provided a patch.

Description -

A vulnerability in Microsoft Office Excel may allow or remote code execution attacks. The flaw is specific to the improper parsing of the Excel spreadsheet file format. Exploitation can be achieved via a specially-crafted Excel file. Upon exploitation an attacker can gain full control of a compromised system.

McAfee Product Mitigation & Recommendations

Recommendations -

The vendor has released a patch to address this issue: http://www.microsoft.com/technet/security/bulletin/ms09-021.mspx

McAfee Product Mitigation

McAfee Foundstone
Signature:
(MS09-021) Microsoft Office Excel String Copy Stack-Based Overrun Vulnerability (969462)
Signature identifier:
6760
Release date:
6/9/2009
McAfee Intrushield
Signature:
HTTP: Microsoft Office Excel String Copy Stack-Based Overrun Vulnerability
Signature identifier:
0x40260100
Release date:
6/9/2009
First released in:
4.1.51, 5.1.21

The Remedy V-Flash of June 10 contains remedies.

Release date:
6/10/2009

Additional Resources

Additional Resources -

Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (969462)

http://www.microsoft.com/technet/security/bulletin/ms09-021.mspx