62823 : Microsoft Office Excel XLS File DbOrParamQry Record Parsing Overflow
Printer | http://osvdb.org/62823 | Email This | Edit Vulnerability

Views This Week	Views All Time	Added to OSVDB	Last Modified	Modified (since 2008)	Percent Complete
6	1080	about 3 years ago	10 months ago	25 times	100%

Timeline

Disclosure Date
2010-03-09

Time to Patch
125 days

Description

A memory corruption occurs on Microsoft Office Excel 2002 when parsing a .XLS file with a malformed DbOrParamQry record. This vulnerability could be used by a remote attacker to execute arbitrary code in the context of the currently logged on user, by enticing the user to open a specially crafted file.

Classification

Location: Local / Remote, Context Dependent
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Commercial
Disclosure: Vendor Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability.

Products

Microsoft Corporation	Office for Mac	2008
		2004
	Office Excel 2003	SP 3

References

CVE ID: 2010-0264 (see also: NVD)
Secunia Advisory ID: 38805
SCIP VulDB ID: 4090
Related OSVDB ID: 62817 62818 62819 62820 62821 62822
Microsoft Knowledge Base Article: 978380 978382 978383 978471 978474 979439 980150 980837 980839 980840
Mail List Post: http://seclists.org/fulldisclosure/2010/Mar/174
Other Advisory URL: http://www.coresecurity.com/content/CORE-2009-1103
Generic Exploit URL: http://www.saintcorporation.com/cgi-bin/exploit_info/excel_dborparamqry
Microsoft Security Bulletin: MS10-017

Tools & Filters

	45021

Credit

Damián Frizza - Core Security Technologies

CVSSv2 Score

CVSSv2 Base Score = 9.3
Source: nvd.nist.gov | Generated: 2010-03-11 | Disagree?

Comments

Add Comment Hide Add Comment

No Comments.

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.