Intrusion PreventionMS.Excel.Style.Record.Memory.Corruption
Description
This indicates an attempt to exploit a vulnerability in Microsoft Excel.
The vulnerability exists in the way Excel handles Style record data when opening an Excel file. The vulnerability is caused by a memory handling error in Excel if a user opens a specially crafted Excel file when validating Style record information. An attacker may exploit this to take complete control of the affected system.
Affected Products
Microsoft Office 2000 Service Pack 3
Microsoft Office XP Service Pack 3
Microsoft Office 2003 Service Pack 2
2007 Microsoft Office System
Microsoft Office Excel Viewer 2003
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats
Microsoft Office 2004 for Mac
Microsoft Office 2008 for Mac
Impact
System compromise
Recommended Actions
Microsoft has released security advisory MS08-014 to address this issue:
http://www.microsoft.com/technet/security/bulletin/MS08-014.mspx
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 15468 |
| Created | Mar 12, 2008 |
| Updated | Mar 11, 2022 |
| Risk |
|
| CVE ID | CVE-2008-0114 |
| Exploit Prediction Score | 81.87% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | MS_Office |