Summary
This host is missing an important security update according to Microsoft Bulletin MS12-076.
Impact
Successful exploitation will allow attackers to execute arbitrary code with the privileges of the user running the affected application.
Impact Level: System/Application
Solution
Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://technet.microsoft.com/en-us/security/bulletin/ms12-076
Insight
- An error when processing the 'SerAuxErrBar' record can be exploited to cause a heap-based buffer overflow via a specially crafted file.
- An input validation error can be exploited to corrupt memory via a specially crafted file.
- A use-after-free error when processing the 'SST' record can be exploited via a specially crafted file.
- An error when processing certain data structures can be exploited to cause a stack-based buffer overflow via a specially crafted file.
Affected
Microsoft Excel Viewer
Microsoft Excel 2003 Service Pack 3
Microsoft Excel 2010 Service Pack 1 and prior
Microsoft Office 2010 Service Pack 1 and prior
Microsoft Excel 2007 Service Pack 2 and Service Pack 3 Microsoft Office 2007 Service Pack 2 and Service Pack 3 Microsoft Office Compatibility Pack Service Pack 2 and Service Pack 3
References
- http://secunia.com/advisories/51242/
- http://support.microsoft.com/kb/2597126
- http://support.microsoft.com/kb/2687307
- http://support.microsoft.com/kb/2687311
- http://support.microsoft.com/kb/2687313
- http://support.microsoft.com/kb/2687481
- http://technet.microsoft.com/en-us/security/bulletin/ms12-076
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2012-1885, CVE-2012-1886, CVE-2012-1887, CVE-2012-2543 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Blended Threat Vulnerability in SearchPath Could Allow Elevation of Privilege (959426)
- Microsoft .NET Framework and Microsoft Silverlight Remote Code Execution Vulnerabilities (2651026)
- Microsoft .NET Framework Remote Code Execution Vulnerability (2693777)
- Microsoft Group Policy Remote Code Execution Vulnerability (3000483)
- Buffer Overrun In HTML Converter Could Allow Code Execution (823559)