Signature Detail

HTTP: Microsoft Excel 2002 Malformed HFPicture Record

This signature detects attempts to exploit a known flaw in Microsoft Excel 2002. An Excel file with a malformed HFPicture record, when loaded by a victim, can allow arbitrary code execution.

Extended Description

Microsoft Excel is prone to a memory-corruption vulnerability. An attacker could exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts may result in denial-of-service conditions.

Affected Products

• Microsoft Excel 2002 SP3

References

• BugTraq: 43419
• URL: http://office.microsoft.com/excel
• URL: http://www.microsoft.com
• URL: http://www.exploit-db.com/moaub-23-microsoft-office-excel-2002-memory-corruption-vulnerability-0day/