|
|
|
Microsoft Office Multiple Code Execution Vulnerabilities
|
|
Secunia Advisory:
|
SA19138
|
|
|
Release Date:
|
2006-03-14
|
|
Last Update:
|
2008-05-15
|
|
Popularity:
|
26,664 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Microsoft Excel 2000
Microsoft Excel 2002
Microsoft Excel 2003
Microsoft Office 2000
Microsoft Office 2003 Professional Edition
Microsoft Office 2003 Small Business Edition
Microsoft Office 2003 Standard Edition
Microsoft Office 2003 Student and Teacher Edition
Microsoft Office 2004 for Mac
Microsoft Office Excel Viewer 2003
Microsoft Office X for Mac
Microsoft Office XP
Microsoft Outlook 2000
Microsoft Outlook 2002
Microsoft PowerPoint 2000
Microsoft PowerPoint 2002
Microsoft Word 2000
Microsoft Word 2002
Microsoft Works Suite 2001
Microsoft Works Suite 2002
Microsoft Works Suite 2003
Microsoft Works Suite 2004
Microsoft Works Suite 2005
Microsoft Works Suite 2006
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 2 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Solution:
Apply patches.
Microsoft Word 2000 (requires Office 2000 SP3):
http://www.microsoft.com/downloads/de...=CD2179FD-37F5-4D09-B653-0174651CF5E4
Microsoft Excel 2000 (requires Office 2000 SP3):
http://www.microsoft.com/downloads/de...=C9433440-31EF-4C18-A0C7-B595EA23F6FC
Microsoft Outlook 2000 (requires Office 2000 SP3):
http://www.microsoft.com/downloads/de...=2B231231-AC83-4688-9C8D-DCDCB544FB3C
Microsoft PowerPoint 2000 (requires Office 2000 SP3):
http://www.microsoft.com/downloads/de...=F24D4BD0-4771-4688-B52A-02D4EABB1574
Microsoft Office 2000 MultiLanguage Packs (requires Office 2000 SP3):
http://www.microsoft.com/downloads/de...=0AAA1700-766F-4979-B51F-AAA0A24EF2E8
Microsoft Word 2002 (requires Office XP SP3):
http://www.microsoft.com/downloads/de...-8D28-C9618FA7A458&displaylang=en
Microsoft Excel 2002 (requires Office XP SP3):
http://www.microsoft.com/downloads/de...-AB58-7A916B33607D&displaylang=en
Microsoft Outlook 2002 (requires Office XP SP3):
http://www.microsoft.com/downloads/de...=9B0D4441-4F88-4B59-A4F3-6FB558EF8135
Microsoft PowerPoint 2002 (requires Office XP SP3):
http://www.microsoft.com/downloads/de...=C74CB45B-CF92-4EFC-8DBE-DBF4BDEBE215
Microsoft Office XP Multilingual User Interface Packs (requires Office XP SP3):
http://www.microsoft.com/downloads/de...-881C-CE58D6972E1F&displaylang=en
Microsoft Excel 2003 (requires Office 2003 SP1/SP2):
http://www.microsoft.com/downloads/de...-984E-6C19D8F5FE41&displaylang=en
Microsoft Excel 2003 Viewer (requires Office 2003 SP1/SP2):
http://www.microsoft.com/downloads/de...-91B5-90DD2AF2C0FC&displaylang=en
Microsoft Works Suite 2000:
http://www.microsoft.com/downloads/de...-B653-0174651CF5E4&displaylang=en
Microsoft Works Suite 2001:
http://www.microsoft.com/downloads/de...-B653-0174651CF5E4&displaylang=en
Microsoft Works Suite 2002:
http://www.microsoft.com/downloads/de...-8D28-C9618FA7A458&displaylang=en
Microsoft Works Suite 2003:
http://www.microsoft.com/downloads/de...-8D28-C9618FA7A458&displaylang=en
Microsoft Works Suite 2004:
http://www.microsoft.com/downloads/de...-8D28-C9618FA7A458&displaylang=en
Microsoft Works Suite 2005:
http://www.microsoft.com/downloads/de...-8D28-C9618FA7A458&displaylang=en
Microsoft Works Suite 2006:
http://www.microsoft.com/downloads/de...-8D28-C9618FA7A458&displaylang=en
Microsoft Office X for Mac:
http://www.microsoft.com/mac/
Microsoft Office 2004 for Mac:
http://www.microsoft.com/mac/
Provided and/or discovered by:
1) Peter Winter-Smith of NGSSoftware (the vendor also credits FelicioX).
2) The vendor credits Ollie Whitehouse, Symantec.
3) Arnaud Dovi
4) Dejun Meng, Fortinet Security Response Team.
5) Reported by vendor.
6) The vendor credits Eyas, XFOCUS Security Team.
Changelog:
2006-03-15: Added links to US-CERT vulnerability notes. Added additional information from Zero Day Initiative, Fortinet, HexView, XFOCUS, and Symantec.
2008-05-15: Updated Fortinet links.
Original Advisory:
MS06-012 (KB905413):
http://www.microsoft.com/technet/security/Bulletin/MS06-012.mspx
Zero Day Initiative:
http://www.zerodayinitiative.com/advisories/ZDI-06-004.html
HexView:
http://www.hexview.com/docs/20060314-1.txt
XFOCUS Security Team:
http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043660.html
Symantec:
http://www.symantec.com/enterprise/research/SYMSA-2006-001.txt
Fortinet:
http://www.fortiguardcenter.com/advisory/FGA-2006-11.html
http://www.fortiguardcenter.com/advisory/FGA-2006-12.html
Other References:
US-CERT VU#682820:
http://www.kb.cert.org/vuls/id/104302
http://www.kb.cert.org/vuls/id/123222
http://www.kb.cert.org/vuls/id/235774
http://www.kb.cert.org/vuls/id/339878
http://www.kb.cert.org/vuls/id/642428
http://www.kb.cert.org/vuls/id/682820
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
9th Nov, 2009
|
New advisories:
|
6 |
|
New vulnerabilities:
|
23 |
|
Updated advisories:
|
66 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
6th Nov, 2009
|
New advisories:
|
17 |
|
New vulnerabilities:
|
65 |
|
Updated advisories:
|
21 |
|
|
|
|
|
|
|
|
|
|
|
|
|
 Solutions | More...
|
|
|
|
Send Feedback to Secunia
|
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
|
|
|
|
|
|
|
