Sean Larsson

A remote code execution issue exists in the way Microsoft Excel handles specially crafted Excel files, allowing attackers to execute arbitrary code via a crafted spreadsheet. This could enable an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

A remote code execution issue exists in the way Microsoft Excel handles specially crafted Excel files. This allows an attacker to execute arbitrary code via a crafted spreadsheet. An attacker who successfully exploits this issue could take complete control of an affected system, then install programs, view, change, or delete data, or create new accounts with full user rights.

A remote code execution issue exists in the way Microsoft Excel handles specially crafted Excel files, allowing attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening. This could enable an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

A remote code execution issue exists in the way Microsoft Office Excel handles specially crafted Excel files, potentially allowing attackers to execute arbitrary code via a crafted spreadsheet. This can occur when a MDXSET record is broken up into several records. An attacker who successfully exploits this issue could take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

A remote code execution issue exists due to improper parsing of the Excel file format, allowing attackers to execute arbitrary code via a crafted spreadsheet. This could enable an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

A remote code execution issue exists due to improper parsing of the Excel file format, allowing attackers to execute arbitrary code via a crafted spreadsheet. This could lead to an attacker taking complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

A use-after-free issue in Microsoft Office PowerPoint allows remote attackers to execute arbitrary code via a crafted PowerPoint document. This is a remote code execution vulnerability that exists in the way Microsoft Office PowerPoint handles specially crafted PowerPoint files, potentially allowing an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

The issue allows remote attackers to execute arbitrary code via a specially crafted Word file, which triggers a heap-based buffer overflow due to an integer overflow in the text converters. This occurs when a user opens a malicious file, such as a DOC file with an invalid number of property names in the DocumentSummaryInformation stream.

The issue is related to the handling of a FEATHEADER record in Excel files, specifically when the record contains an invalid cbHdrData size element. This can lead to memory corruption and allow remote attackers to execute arbitrary code. An attacker who successfully exploits this issue could gain complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Name of the Vulnerable Software and Affected Versions: Microsoft Office XP SP3 Microsoft Office 2000 Web Components SP3 Microsoft Office XP Web Components SP3 Microsoft BizTalk Server 2002 Microsoft Visual Studio .NET 2003 SP1 Description: The issue is related to a buffer overflow in the Office Web Components ActiveX Control, which allows remote attackers to execute arbitrary code via crafted property values. Recommendations: For Microsoft Office XP SP3, update to a version that includes the fix for this issue. For Microsoft Office 2000 Web Components SP3, update to a version that includes the fix for this issue. For Microsoft Office XP Web Components SP3, update to a version that includes the fix for this issue. For Microsoft BizTalk Server 2002, update to a version that includes the fix for this issue. For Microsoft Visual Studio .NET 2003 SP1, update to a version that includes the fix for this issue.

The issue allows remote attackers to execute arbitrary code via an Excel file with a Shared String Table (SST) record containing a numeric field that specifies an invalid number of unique strings, triggering a heap-based buffer overflow. This could enable an attacker to take complete control of an affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights.

A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via a crafted structure in a Notes container in a PowerPoint file. This occurs when PowerPoint reads more data than was allocated when creating a C++ object, leading to an overwrite of a function pointer. The vulnerability can be exploited by creating a specially crafted PowerPoint file that could be included as an e-mail attachment or hosted on a specially crafted or compromised Web site.

The issue is related to an integer overflow that allows remote attackers to execute arbitrary code via a crafted PowerPoint file. This file can contain a record type for collaboration information for different slides with a field specifying a large number of records, triggering an under-allocated buffer and a heap-based buffer overflow. A remote code execution vulnerability exists in the way Microsoft Office PowerPoint handles specially crafted PowerPoint files, which could be exploited by an attacker creating such a file to be included as an email attachment or hosted on a specially crafted or compromised website.

A remote code execution issue exists due to improper validation of PowerPoint files, allowing attackers to execute arbitrary code via crafted BuildList records that include ChartBuild containers, which triggers memory corruption. This can be exploited by creating a specially crafted PowerPoint file that could be included as an e-mail attachment or hosted on a specially crafted or compromised Web site.

The issue is related to a stack-based buffer overflow in the Word 97 text converter in WordPad, allowing remote attackers to execute arbitrary code via a crafted Word 97 file. This occurs due to the use of inconsistent integer data sizes for an unspecified length field, leading to memory corruption. A remote code execution vulnerability exists in WordPad when a user opens a specially crafted Word file, resulting in memory corruption.

The issue is related to a heap-based buffer overflow that can be triggered by a PDF file containing a JBIG2 stream with a size inconsistency. This inconsistency is related to an unspecified table, allowing remote attackers to execute arbitrary code.

The issue is related to an integer overflow in the `rtl allocateMemory` function, which can lead to a heap-based buffer overflow. This can be triggered by a crafted file, potentially allowing remote attackers to execute arbitrary code.

Name of the Vulnerable Software and Affected Versions: GIMP versions prior to 2.2.16 Description: The issue is related to multiple integer overflows in the image loader plug-ins, which can be exploited by user-assisted remote attackers to execute arbitrary code. This can be achieved through crafted length values in various file types, including DICOM, PNM, PSD, PSP, Sun RAS, XBM, and XWD files. Recommendations: For versions prior to 2.2.16, update to version 2.2.16 or later to resolve the issue.

The issue is related to multiple buffer overflows that may allow attackers to execute arbitrary code. The overflows occur due to off-by-one errors in the imapd annotate extension and "cached header handling," as well as stack-based buffer overflows in fetchnews and imapd.

The issue involves multiple vulnerabilities in various packages of openSUSE and SUSE Linux Enterprise operating systems, which can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. Specifically, an integer overflow in the ALLOCATE LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server allows remote authenticated users to execute arbitrary code via a large expression, resulting in memory corruption.