漏洞信息详情
Microsoft Excel BIFF文件格式解析栈溢出漏洞
漏洞简介
Excel是微软Office办公套件中的电子表格工具。
Excel在解析BIFF文件格式时使用文件中记录的内容计算拷贝用户提供数据的栈缓冲区的大小,远程攻击者在记录中设置了特制的记录值,可能触发栈溢出,导致执行任意指令。
漏洞公告
目前厂商已经发布了升级补丁以修复这个安全问题,补丁下载链接:
Microsoft Office 2008 for Mac 0
Microsoft Microsoft Office 2008 for Mac 12.1.3 Update
http://www.microsoft.com/downloads/details.aspx?FamilyId=E70C5AE0-2858 -46DE-81F8-DCD1786656B7
Microsoft Excel 2003 SP3
Microsoft Security Update for Microsoft Office Excel 2003 (KB955466)
http://www.microsoft.com/downloads/details.aspx?FamilyId=4df27e8a-d803 -483b-a700-0177d71bf368
Microsoft Excel Viewer 0
Microsoft Security Update for Microsoft Office Excel Viewer (KB955935)
http://www.microsoft.com/downloads/details.aspx?FamilyId=83c88444-75b8 -44d1-b280-3671394ade45
Microsoft Office Compatibility Pack 2007 SP1
Microsoft Security Update for 2007 Microsoft Office System (KB955936)
http://www.microsoft.com/downloads/details.aspx?FamilyId=9a7be004-5903 -4101-90c5-c0d5f8722af9
Microsoft Open XML File Format Converter for Mac 0
Microsoft Open XML File Format Converter for Mac 1.0.1
http://www.microsoft.com/downloads/details.aspx?FamilyId=2A8D9A3B-B8A4 -43B6-82A6-A2E7D16AE11D
Microsoft Excel 2007 0
Microsoft Security Update for Microsoft Office Excel 2007 (KB955470)
http://www.microsoft.com/downloads/details.aspx?FamilyId=2765bbc0-ea2e -4b6e-822c-222ee8e5021f
Microsoft Excel 2007 SP1
Microsoft Security Update for Microsoft Office Excel 2007 (KB955470)
http://www.microsoft.com/downloads/details.aspx?FamilyId=2765bbc0-ea2e -4b6e-822c-222ee8e5021f
Microsoft Excel 2003 SP2
Microsoft Security Update for Microsoft Office Excel 2003 (KB955466)
http://www.microsoft.com/downloads/details.aspx?FamilyId=4df27e8a-d803 -483b-a700-0177d71bf368
Microsoft Excel 2002 SP3
Microsoft Security Update for Microsoft Excel 2002 (KB955464)
http://www.microsoft.com/downloads/details.aspx?FamilyId=27cedef1-c47c -472c-a343-cd9b4ebc2bba
Microsoft Office 2004 for Mac 0
Microsoft Microsoft Office 2004 for Mac 11.5.2 Update
http://www.microsoft.com/downloads/details.aspx?FamilyId=BA4FA21A-7E01 -4EF8-9B9F-9D51D00EF094
Microsoft Excel Viewer 2003 SP3
Microsoft Security Update for Microsoft Office Excel Viewer 2003 (KB955468)
http://www.microsoft.com/downloads/details.aspx?FamilyId=9769ce08-5207 -4c63-b7b9-536266ad6b2b
Microsoft Office Compatibility Pack 2007 0
Microsoft Security Update for 2007 Microsoft Office System (KB955936)
http://www.microsoft.com/downloads/details.aspx?FamilyId=9a7be004-5903 -4101-90c5-c0d5f8722af9
Microsoft Excel 2000 SP3
Microsoft Security Update for Microsoft Excel 2000 (KB955461)
http://www.microsoft.com/downloads/details.aspx?FamilyId=1b2740e0-ecdd -48ca-84e0-eb187c31eb16
Microsoft Office Excel Viewer 2003 SP3
Microsoft Security Update for Microsoft Office Excel Viewer 2003 (KB955468)
http://www.microsoft.com/downloads/details.aspx?FamilyId=9769ce08-5207 -4c63-b7b9-536266ad6b2b
Microsoft Excel Viewer 2003 0
Microsoft Security Update for Microsoft Office Excel Viewer 2003 (KB955468)
http://www.microsoft.com/downloads/details.aspx?FamilyId=9769ce08-5207 -4c63-b7b9-536266ad6b2b
参考网址
来源: US-CERT
名称: TA08-288A
链接:http://www.us-cert.gov/cas/techalerts/TA08-288A.html
来源: BID
名称: 31705
链接:http://www.securityfocus.com/bid/31705
来源: MS
名称: MS08-057
链接:http://www.microsoft.com/technet/security/Bulletin/MS08-057.mspx
来源: SECUNIA
名称: 32211
链接:http://secunia.com/advisories/32211
来源: XF
名称: win-ms08kb956416-update(45581)
链接:http://xforce.iss.net/xforce/xfdb/45581
来源: XF
名称: excel-file-format-code-execution(45579)
链接:http://xforce.iss.net/xforce/xfdb/45579
来源: MISC
链接:http://www.zerodayinitiative.com/advisories/ZDI-08-068/
来源: SECTRACK
名称: 1021044
链接:http://www.securitytracker.com/id?1021044
来源: VUPEN
名称: ADV-2008-2808
链接:http://www.frsirt.com/english/advisories/2008/2808
来源: OVAL
名称: oval:org.mitre.oval:def:5750
链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5750
来源: HP
名称: HPSBST02379
链接:http://marc.info/?l=bugtraq&m=122479227205998&w=2
来源: HP
名称: HPSBST02379
链接:http://marc.info/?l=bugtraq&m=122479227205998&w=2
受影响实体
- Microsft Open_xml_file_format_converter:Unknown:Mac<!--2000-1-1-->
补丁
暂无
还没有评论,来说两句吧...