Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
146377 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.903026
Categoría:Windows : Microsoft Bulletins
Título:Microsoft Office Remote Code Execution Vulnerabilities (2663830)
Resumen:This host is missing an important security update according to; Microsoft Bulletin MS12-030.
Descripción:Summary:
This host is missing an important security update according to
Microsoft Bulletin MS12-030.

Vulnerability Insight:
The flaws are due to errors while handling OBJECTLINK record,
SXLI record, MergeCells record and a mismatch error when handling the Series
record within Excel files.

Vulnerability Impact:
Successful exploitation could allow attackers to execute arbitrary code
with the privileges of the user running the affected application.

Affected Software/OS:
- Microsoft Excel Viewer

- Microsoft Excel 2003 Service Pack 3

- Microsoft Excel 2010 Service Pack 1 and prior

- Microsoft Office 2010 Service Pack 1 and prior

- Microsoft Excel 2007 Service Pack 2 and Service Pack 3

- Microsoft Office 2007 Service Pack 2 and Service Pack 3

- Microsoft Office Compatibility Pack Service Pack 2 and Service Pack 3

Solution:
The vendor has released updates. Please see the references for more information.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2012-0141
BugTraq ID: 53342
http://www.securityfocus.com/bid/53342
Cert/CC Advisory: TA12-129A
http://www.us-cert.gov/cas/techalerts/TA12-129A.html
Microsoft Security Bulletin: MS12-030
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-030
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15152
http://www.securitytracker.com/id?1027041
http://secunia.com/advisories/49112
Common Vulnerability Exposure (CVE) ID: CVE-2012-0142
BugTraq ID: 53373
http://www.securityfocus.com/bid/53373
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15543
Common Vulnerability Exposure (CVE) ID: CVE-2012-0143
BugTraq ID: 53374
http://www.securityfocus.com/bid/53374
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15064
Common Vulnerability Exposure (CVE) ID: CVE-2012-0184
BugTraq ID: 53375
http://www.securityfocus.com/bid/53375
http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=982
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14789
XForce ISS Database: ms-excel-sxli-code-execution(75117)
https://exchange.xforce.ibmcloud.com/vulnerabilities/75117
Common Vulnerability Exposure (CVE) ID: CVE-2012-0185
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14738
XForce ISS Database: ms-excel-mergecells-bo(75118)
https://exchange.xforce.ibmcloud.com/vulnerabilities/75118
Common Vulnerability Exposure (CVE) ID: CVE-2012-1847
BugTraq ID: 53379
http://www.securityfocus.com/bid/53379
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15575
XForce ISS Database: ms-excel-series-code-execution(75119)
https://exchange.xforce.ibmcloud.com/vulnerabilities/75119
CopyrightCopyright (C) 2012 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.