Signature Detail
Short Name |
HTTP:STC:DL:MS-XL-2003-NULL-DOS |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Microsoft Excel 2003 NULL Pointer Dereference Denial Of Service |
Release Date |
2012/12/03 |
Update Number |
2207 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Microsoft Excel 2003 NULL Pointer Dereference Denial Of Service
This signature detects attempts to exploit a known vulnerability against Microsoft Excel 2003. A successful attack can result in a denial-of-service condition.
Extended Description
Microsoft Excel is reportedly prone to a denial-of-service vulnerability. This issue occurs when the application handles a specially crafted file. This issue stems from a NULL-pointer dereference. Initial reports indicate that this issue is distinct from that outlined in BID 22555 Microsoft Excel Remote Denial Of Service Vulnerability. Exploitation could cause the application to crash, resulting in a denial of service.
Affected Products
- Microsoft Excel 2003 SP1
- Microsoft Excel 2003 SP2
- Microsoft Excel 2003
References
- BugTraq: 22717
- CVE: CVE-2007-1239