Signature Detail

HTTP: Microsoft Office Excel Pivot Item Index Boundary Error Memory Corruption

This signature detects attempts to exploit a known memory corruption vulnerability in Microsoft Office Excel. It is due to improper parsing of a malformed Excel file. Remote attackers can exploit this vulnerability by enticing target users to open a malicious Excel file, potentially causing arbitrary code to be injected and executed in the security context of the current user.

Extended Description

Microsoft Excel is prone to a remote code-execution vulnerability because it fails to properly bounds-check user-supplied input. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel ('.xls') file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the application.

Affected Products

• Microsoft Excel 2002 SP1
• Microsoft Excel 2002 SP2
• Microsoft Excel 2002 SP3
• Microsoft Excel 2002
• Microsoft Excel 2003 SP1
• Microsoft Excel 2003 SP2
• Microsoft Excel 2003 SP3
• Microsoft Excel 2003
• Microsoft Office 2004 for Mac
• Microsoft Office 2008 for Mac
• Microsoft Open XML File Format Converter for Mac

References

• BugTraq: 42199
• CVE: CVE-2010-2562