Vulnerability Bulletins |
Múltiples vulnerabilidades en Microsoft Office Excel |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | Microsoft |
| Affected software | Microsoft Office |
Description |
|
|
Se han descubierto múltiples vulnerabilidades en Microsoft Office Excel. Las vulnerabilidades residen en errores en la validación de ficheros .xls que provocan corrupción de memoria y desbordamiento de búfer. Un atacante remoto podría ejecutar código arbitrario mediante un fichero Excel especialmente diseñado. |
|
Solution |
|
|
Actualización de software Microsoft (MS09-067) Microsoft Office XP Service Pack 3 / patch officexp-KB973471-FullFile-ENU Microsoft Office 2003 Service Pack 3 / patch office2003-KB973475-FullFile-ENU.exe 2007 Microsoft Office System SP 1 y 2007 Microsoft Office System SP 2 / patch excel2007-kb973593-fullfile-x86-glb http://www.microsoft.com/downloads |
|
Standar resources |
|
| Property | Value |
| CVE |
CVE-2009-3127 CVE-2009-3128 CVE-2009-3129 CVE-2009-3130 CVE-2009-3131 CVE-2009-3132 CVE-2009-3133 CVE-2009-3134 |
| BID | |
Other resources |
|
|
Microsoft Security Bulletin (MS09-067) http://www.microsoft.com/technet/security/bulletin/ms09-067.mspx |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2009-11-16 |