Intrusion PreventionMS.Office.Excel.Index.Parsing.Remote.Code.Execution
Description
This indicates an attack attempt to exploit an Remote Code Execution vulnerability in Microsoft Excel.
The vulnerability is caused by an error that occurs when the vulnerable software handles a malicious "XLS" file. A remote attacker may exploit this to execute arbitrary code via a crafted "XLS" file.
Affected Products
Office XP SP3
Office 2003 SP3
Office 2007 SP2
Office 2004 for Mac
Office 2008 for Mac
and prior service packs.
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
The vendor has issued the following fixes:
Microsoft Office XP Service Pack 3, Microsoft Office Excel 2002 Service Pack 3:
http://www.microsoft.com/downloads/details.aspx?familyid=5672c8fc-8509-4962-ad86-ebc0f2575043
Microsoft Office 2003 Service Pack 3, Microsoft Office Excel 2003 Service Pack 3:
http://www.microsoft.com/downloads/details.aspx?familyid=6a6a0f5d-17dc-4a34-b9a0-0774aa287ba5
2007 Microsoft Office System Service Pack 1 and 2007 Microsoft Office System Service Pack 2, Microsoft Office Excel 2007 Service Pack 1 and Microsoft Office Excel 2007 Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=322b24ca-aff6-4ca0-acf1-440cae0f9693
Microsoft Office 2004 for Mac:
http://www.microsoft.com/downloads/details.aspx?familyid=8f115b1c-1e28-4ecf-937c-99c4b60c7c8e
Microsoft Office 2008 for Mac:
http://www.microsoft.com/downloads/details.aspx?familyid=b84fe57d-ddda-451e-9ead-69e10aee7928
Open XML File Format Converter for Mac:
http://www.microsoft.com/downloads/details.aspx?familyid=4dd4bc05-1217-497e-8f65-4347f2544ed6
Microsoft Office Excel Viewer 2003 Service Pack 3:
http://www.microsoft.com/downloads/details.aspx?familyid=19151e22-5642-456c-bd39-298574369cdb
Microsoft Office Excel Viewer Service Pack 1 and Microsoft Office Excel Viewer Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=fb36df5e-ebef-46bf-9edd-67f2c76dbdb3
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Service Pack 1 and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=c4c92d2e-e87d-446f-8d3e-8f4be10c70aa
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Service Pack 1 and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=c4c92d2e-e87d-446f-8d3e-8f4be10c70aa
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 29082 |
| Created | Sep 09, 2011 |
| Updated | Apr 23, 2014 |
| Risk |
|
| CVE ID | CVE-2009-3132 |
| Exploit Prediction Score | 75.3% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | MS_Office |