Content

(MS09-021) Microsoft Office Excel Field Sensitization Memory Corruption Vulnerability (969462)

Type
Logic error
Impact of exploitation
Remote Code Execution
User Interaction
user interaction is needed
Attack Vector
Maliciously Crafted File
Rating
Medium
CVE reference
CVE-2009-0560,
Vendor Status
Responded and patched
Vulnerable systems
Excel  2000 SP3,
Excel  2002 SP3,
Excel  2003 SP3,
Excel  2007 SP1,
Excel 2007  SP2,
Office  2004 Mac,
Office  2008 for Mac,
Open XML File Format Converter for Mac  1.0,
Excel Viewer  2003 SP3,
Office Compatibility Pack Word,Excel,Powerpoint  2007 SP2,
Summary
A vulnerability in Microsoft Office Excel may allow for remote code execution attacks.

Tab Navigation

Description

A vulnerability in Microsoft Office Excel may allow for remote code execution attacks. The flaw is specific to the improper handling of Excel file which contain malformed record objects. Exploitation can be achieved via a specially-crafted Excel file.

McAfee Product Mitigation & Recommendations

Recommendations

The vendor has released a patch to address this issue: http://www.microsoft.com/technet/security/bulletin/ms09-021.mspx

McAfee Product Mitigation

McAfee Foundstone
Signature:
(MS09-021) Microsoft Office Excel Field Sensitization Memory Corruption Vulnerability (969462)
Signature identifier:
6755
Release date:
6/9/2009
McAfee Intrushield
Signature:
HTTP: Microsoft Office Excel Field Sanitization Memory Corruption Vulnerability
Signature identifier:
0x40260600
Release date:
6/9/2009
First released in:
4.1.51, 5.1.21

The V-Flash update of 6/9/2009 or 6/10/2009 will contain remedies for Office on Windows. Office 2000 requires manual interaction. Office for Mac is not supported.

Release date:
6/10/2009

Additional Resources

Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (969462)

http://www.microsoft.com/technet/security/bulletin/ms09-021.mspx

All Information

Timeline -

6/9/2009

Vendor has provided a patch.

Description -

A vulnerability in Microsoft Office Excel may allow for remote code execution attacks. The flaw is specific to the improper handling of Excel file which contain malformed record objects. Exploitation can be achieved via a specially-crafted Excel file.

McAfee Product Mitigation & Recommendations

Recommendations -

The vendor has released a patch to address this issue: http://www.microsoft.com/technet/security/bulletin/ms09-021.mspx

McAfee Product Mitigation

McAfee Foundstone
Signature:
(MS09-021) Microsoft Office Excel Field Sensitization Memory Corruption Vulnerability (969462)
Signature identifier:
6755
Release date:
6/9/2009
McAfee Intrushield
Signature:
HTTP: Microsoft Office Excel Field Sanitization Memory Corruption Vulnerability
Signature identifier:
0x40260600
Release date:
6/9/2009
First released in:
4.1.51, 5.1.21

The V-Flash update of 6/9/2009 or 6/10/2009 will contain remedies for Office on Windows. Office 2000 requires manual interaction. Office for Mac is not supported.

Release date:
6/10/2009

Additional Resources

Additional Resources -

Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (969462)

http://www.microsoft.com/technet/security/bulletin/ms09-021.mspx