Check Point Advisories

Preemptive Protection against Microsoft Excel Lbl Record Stack Corruption Vulnerability (MS10-038)

Check Point Reference:	CPAI-2010-096
Date Published:	8 Jun 2010
Severity:	High
Last Updated:	Friday 11 June, 2010
Source:	Microsoft Security Bulletin MS10-038
Industry Reference:	CVE-2010-1251
Protection Provided by:
Who is Vulnerable?	Microsoft Office 2004 for Mac
Vulnerability Description	A stack corruption vulnerability has been identified in Microsoft Excel. Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system.
Update/Patch Avaliable	Update patches: Microsoft Security Bulletin MS10-038
Vulnerability Details	The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted Excel spreadsheet file that includes a malformed Lbl record. Successful exploitation of this issue may allow execution of arbitrary code on a vulnerable system.