Check Point Advisories

Workaround for Microsoft Office Excel BIFF5 Records Vulnerabilities (MS11-045; CVE-2011-1273)

Check Point Reference: SBP-2011-09
Date Published: 15 Jun 2011
Severity: High
Last Updated: 20 Jun 2011
Source: Microsoft Security Bulletin MS11-045
Industry Reference:CVE-2011-1273
Protection Provided by:
Who is Vulnerable? Microsoft Excel 2002 Service Pack 3 Microsoft Excel 2003 Service Pack 3 Microsoft Excel 2007 Service Pack 2 Microsoft Excel 2010 (32-bit editions) Microsoft Excel (64-bit editions) Microsoft Office for Mac Microsoft Office 2004 for Mac Microsoft Office 2008 for Mac Microsoft Office for Mac 2011 Open XML File Format Converter for Mac Other Microsoft Office Software Microsoft Excel Viewer Service Pack 2 Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Service Pack 2
Vulnerability Description A remote code execution vulnerability exists in the way that Microsoft Excel handles specially crafted Excel files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
Update/Patch AvaliableApply patches from Microsoft Security Bulletin MS11-045
Vulnerability DetailsThis is a remote code execution vulnerability. When Microsoft Excel validates record information upon opening a specially crafted Excel file, a memory handling error may corrupt system memory in such a way that an attacker could execute arbitrary code. An attacker who successfully exploited this vulnerability could take complete control of an affected system remotely

Protection Overview

×
  Feedback
This website uses cookies to ensure you get the best experience. Got it, Thanks! MORE INFO