Technical Description

Multiple vulnerabilities have been identified in Microsoft Excel, which could be exploited by attackers to take complete control of an affected system [...]

Solution

Security update for Microsoft Excel 2000 :
http://www.microsoft.com/downloads/details.aspx?familyid=5CCF4455-6B22-4249-93D7-661D12839292

Security update for Microsoft Excel 2002 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=EE7278EA-3AEE-4994-9657-66019961D63C

Security update for Microsoft Excel 2003 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=79B88CE8-5C56-462F-AC1A-4BCE04C8F543

Security update for Microsoft Office Excel Viewer 2003 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=99AE7653-F0FD-4DBA-A151-098FD03E6EA4

Security update for Microsoft Works Suite 2004 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=EE7278EA-3AEE-4994-9657-66019961D63C

Security update for Microsoft Works Suite 2005 :
http://www.microsoft.com/downloads/details.aspx?FamilyId=EE7278EA-3AEE-4994-9657-66019961D63C

Security update for Microsoft Office 2004 and Office v. X for Mac :
http://www.microsoft.com/mac/

Credits

Vulnerabilities reported by Jeff Gennari (CERT), Jie Ma (Fortinet Security Research Team), NSFocus Security Team, and Greg MacManus (iDefense Labs).

ChangeLog

2007-01-09 : Initial release

Vulnerability Management

Subscribe to FrSIRT VNS and receive real-time e-mail and SMS alerts when new vulnerabilities, exploits, or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form or by email to updates@frsirt.com.