December 1, 2006 12:47 PM PST
Buffer overflow in Microsoft Works 8
Vulnerabilities specific to Microsoft Works Spreadsheet 8.0 allows remote attackers to create a denial of service (crash) via a specially crafted Excel file. There are two specific vulnerabilities, and each involve memory corruption and NULL pointer dereference errors when processing malformed WKS or XLR files. Successful execution, however, requires users to open a malicious file.
Additional Resources:
- French Security Incident Response Team: ADV-2006-2813
- National Institute of Standards and Technology: CVE-2006-3653 and CVE-2006-3654
As CNET's resident security expert, Robert Vamosi has been interviewed on the BBC, CNN, MSNBC, and other outlets to share his knowledge about the latest online threats and to offer advice on personal and corporate security. Listen to his podcast at securitybites.cnet.com or e-mail Robert with your questions and comments.
