Arbitrary Code Execution in Microsoft Excel

Reported October 12, 2004, byMicrosoft

VERSIONS AFFECTED

DESCRIPTION
A vulnerability in the Microsoft Excel couldresult in the arbitrary execution of code on the vulnerable system. Thisvulnerability is a result of an unchecked buffer, and a potential attacker whosuccessfully exploited the vulnerability could take complete control of anaffected system.

VENDOR RESPONSE
Microsoft has releasedbulletin MS04-033, "Vulnerability in Microsoft Excel Could Allow Remote Code Execution (886836)," to address this vulnerability and recommendsthat affected users apply the appropriate patch listed in the bulletin.

CREDIT
Discovered by Brett Moore.