This host is missing a critical security update according to Microsoft Bulletin MS09-067.

Successful exploitation could execute arbitrary code on the remote system and corrupt memory, buffer overflow via a specially crafted Excel file. Impact Level: System/Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://technet.microsoft.com/en-us/security/bulletin/MS09-067

- An error in the parsing of Excel spreadsheets can be exploited to corrupt memory via a specially crafted Excel file. - An error in the processing of certain record objects can be exploited to corrupt memory via a specially crafted Excel file. - Another error in the processing of certain record objects can be exploited to corrupt memory via a specially crafted Excel file. - An error in the processing of Binary File Format (BIFF) records can be exploited to cause a heap-based buffer overflow via a specially crafted Excel file. - An error in the handling of formulas embedded inside a cell can be exploited to corrupt memory via a specially crafted Excel file. - An error when loading Excel formulas can be exploited to corrupt a pointer when a specially crafted Excel file is being opened. - An error when loading Excel records can be exploited to corrupt memory via a specially crafted Excel file. - An error when processing Excel record objects can be exploited via a specially crafted Excel file.

Microsoft Excel Viewer 2003/2007 Microsoft Office Excel 2002/2003/2007 Microsoft Office Compatibility Pack for Word,Excel,PowerPoint 2007 File Formats SP 1/2

• http://secunia.com/advisories/37299/
• http://support.microsoft.com/kb/972652
• http://technet.microsoft.com/en-us/security/bulletin/MS09-067

---

Updated on 2015-03-25