December 1, 2006 12:47 PM PST
Buffer overflow in Microsoft Works 8
Vulnerabilities specific to Microsoft Works Spreadsheet 8.0 allows remote attackers to create a denial of service (crash) via a specially crafted Excel file. There are two specific vulnerabilities, and each involve memory corruption and NULL pointer dereference errors when processing malformed WKS or XLR files. Successful execution, however, requires users to open a malicious file.
Additional Resources:
- French Security Incident Response Team: ADV-2006-2813
- National Institute of Standards and Technology: CVE-2006-3653 and CVE-2006-3654

