Wen Yujie

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 version SP1 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows RT **Description** The issue is related to improper handling of objects in memory by the Windows kernel-mode driver, allowing local users to gain privileges via a crafted application. This could enable an attacker to execute arbitrary code with elevated privileges. **Recommendations** For Microsoft Windows XP versions SP2 through SP3, update to a newer version to mitigate the risk. For Microsoft Windows Server 2003 version SP2, update to a newer version to mitigate the risk. For Microsoft Windows Vista version SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 versions SP2 through R2 SP1, update to a newer version to mitigate the risk. For Microsoft Windows 7 version SP1, update to a newer version to mitigate the risk. For Microsoft Windows 8, update to a newer version to mitigate the risk. For Microsoft Windows Server 2012, update to a newer version to mitigate the risk. For Microsoft Windows RT, update to a newer version to mitigate the risk.

**Name of the Vulnerable Software and Affected Versions** Microsoft Excel versions 2000 through 2003 **Description** A buffer overflow issue exists due to the processing of a malformed SELECTION record in Excel files, allowing user-assisted attackers to execute arbitrary code. This can be triggered by a specially crafted .xls file, leading to memory corruption. An attacker could exploit this by constructing a malicious Excel file, potentially enabling remote code execution. **Recommendations** For Microsoft Excel versions 2000 through 2003, at the moment, there is no information about a newer version that contains a fix for this vulnerability.