HTTP: Microsoft Excel 2002 Malformed HFPicture Record

This signature detects attempts to exploit a known flaw in Microsoft Excel 2002. An Excel file with a malformed HFPicture record, when loaded by a victim, can allow arbitrary code execution.

Extended Description

Microsoft Excel is prone to a memory-corruption vulnerability. An attacker could exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts may result in denial-of-service conditions.

Affected Products

Microsoft excel_2002

References

BugTraq: 43419

URL: http://office.microsoft.com/excel http://www.microsoft.com http://www.exploit-db.com/moaub-23-microsoft-office-excel-2002-memory-corruption-vulnerability-0day/

Short Name

HTTP:STC:DL:XLS-HFPICTURE-REC

Severity

Major

Recommended

False

Recommended Action

None

HTTP: Microsoft Excel 2002 Malformed HFPicture Record

Extended Description

Affected Products

References

Found a potential security threat?