Test ID:	1.3.6.1.4.1.25623.1.0.900061
Category:	Windows : Microsoft Bulletins
Title:	Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (959070)
Summary:	This host is missing a critical security update according to; Microsoft Bulletin MS08-074.
Description:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS08-074. Vulnerability Insight: The flaws are due to - an error while validating an index value in a NAME record. - an error in the processing of Excel records. - an error in the processing of Excel formula. Vulnerability Impact: Successful exploitation could execute arbitrary code on the remote system and corrupt memory via a specially crafted Excel Spreadsheet (XLS) file. Affected Software/OS: Microsoft Windows 2K/XP/2003. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4264 BugTraq ID: 32621 http://www.securityfocus.com/bid/32621 Cert/CC Advisory: TA08-344A http://www.us-cert.gov/cas/techalerts/TA08-344A.html Microsoft Security Bulletin: MS08-074 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-074 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5556 http://www.securitytracker.com/id?1021368 http://www.vupen.com/english/advisories/2008/3386 Common Vulnerability Exposure (CVE) ID: CVE-2008-4265 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=763 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5614 Common Vulnerability Exposure (CVE) ID: CVE-2008-4266 Bugtraq: 20081209 Secunia Research: Microsoft Excel NAME Record Array Indexing Vulnerability (Google Search) http://www.securityfocus.com/archive/1/499055/100/0/threaded http://secunia.com/secunia_research/2008-36/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5808
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.