|
 |
|
Microsoft Office Drawing Object Code Execution Vulnerability
|
|
|
|
|
Secunia Advisory:
|
SA25178
|
|
|
Release Date:
|
2007-05-08
|
|
Last Update:
|
2008-03-27
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Microsoft Excel 2000
Microsoft Excel 2002
Microsoft Excel 2003
Microsoft Excel Viewer 2003
Microsoft Expression Web 1.x
Microsoft Frontpage 2000
Microsoft Frontpage 2002
Microsoft Frontpage 2003
Microsoft Office 2000
Microsoft Office 2003 Professional Edition
Microsoft Office 2003 Small Business Edition
Microsoft Office 2003 Standard Edition
Microsoft Office 2003 Student and Teacher Edition
Microsoft Office 2004 for Mac
Microsoft Office 2007
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats
Microsoft Office Excel 2007
Microsoft Office Publisher 2007
Microsoft Office SharePoint Designer 2007
Microsoft Office XP
Microsoft Publisher 2000
Microsoft Publisher 2002
Microsoft Publisher 2003
|
| | CVE reference: | CVE-2007-1747 (Secunia mirror)
|
|
|
Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS! |
|
|
Description:
A vulnerability has been reported in Microsoft Office, which can be exploited by malicious people to compromise a user's system.
The vulnerability is caused due to an unspecified error in the parsing of drawing objects and can be exploited via a malicious Office file containing a specially crafted drawing object.
Successful exploitation allows execution of arbitrary code.
Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, scan using the Network Software Inspector.
Solution:
Apply patches.
Microsoft Office 2000 SP3:
http://www.microsoft.com/downloads/de...=A693C271-4B94-4541-953A-0A2DB4587B23
Microsoft Office XP SP3:
http://www.microsoft.com/downloads/de...=CB291AD9-348A-4C28-BEC7-53D2F35D0B72
Microsoft Office 2003 SP2:
http://www.microsoft.com/downloads/de...=819857CC-3777-4E4A-9CC3-685FC079A254
Microsoft Office System 2007:
http://www.microsoft.com/downloads/de...=A3DC8E3F-90DD-4D0C-88B8-2EC88FF3A588
Microsoft Office 2004 for Mac:
http://www.microsoft.com/mac
Provided and/or discovered by:
Reported by the vendor.
Changelog:
2007-05-09: Added link to US-CERT.
2008-03-27: Added "Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats" in list of affected software based on updated information from Microsoft.
Original Advisory:
MS07-025 (KB934873):
http://www.microsoft.com/technet/security/Bulletin/MS07-025.mspx
Other References:
US-CERT VU#853184:
http://www.kb.cert.org/vuls/id/853184
|
|
|
|
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
|
77 Related Secunia Security Advisories, displaying 10
|
|
|
1. Microsoft Office Excel Multiple Vulnerabilities
|
|
2. Microsoft Office PowerPoint Multiple Vulnerabilities
|
|
3. Microsoft Office Filters Multiple Vulnerabilities
|
|
4. Microsoft Word Smart Tag Invalid Length Processing Vulnerability
|
|
5. Microsoft Access Snapshot Viewer ActiveX Control Vulnerability
|
|
6. Microsoft Publisher Object Handler Validation Vulnerability
|
|
7. Microsoft Word Two Code Execution Vulnerabilities
|
|
8. Microsoft Visio Two File Processing Vulnerabilities
|
|
9. Microsoft Office Web Components Two Vulnerabilities
|
|
10. Microsoft Office Two Code Execution Vulnerabilities
|
Show all related advisories
|
|
|
Send Feedback to Secunia
|
|
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
|
|
|
|
|
|
Secunia PSI
Scan | Patch | Track
Free Download
|
|
|
Secunia Poll
|
|
|
|
|
 |
|
|
Most Popular Advisories
|
|
|
|
|
|
