PT-2005-4830
CVE-2005-4131
·
تاريخ النشر
2005-12-09
·
تاريخ التحديث
2018-10-19
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Microsoft Excel versions 2000 through 2003
Microsoft Office version 2000 SP3
Description
The issue allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, potentially leading to memory corruption. This can be exploited by constructing a specially crafted Excel file, allowing remote code execution.
Recommendations
For Microsoft Excel versions 2000 through 2003, update to a version that is not affected by this issue.
For Microsoft Office version 2000 SP3, consider applying security patches or updates that address this vulnerability.
As a temporary workaround, consider restricting the use of Excel files from untrusted sources to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾