Trend Micro Security

Excel SxView Memory Corruption Vulnerability

2011年2月14日
  危険度: : 緊急
  CVE識別番号: CVE-2009-3128

  概要

Microsoft Office Excel 2002 SP3 and 2003 SP3, and Office Excel Viewer 2003 SP3, does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a spreadsheet with a malformed record object, aka "Excel SxView Memory Corruption Vulnerability."

  トレンドマイクロの対策

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

  対応方法

  Trend Micro Deep Security DPI Rule Number: 1004447
  Trend Micro Deep Security DPI Rule Name: 1004447 - Microsoft Excel SxView Memory Corruption

  影響を受けるソフトウェア

  • Microsoft Open XML File Format Converter
  • Microsoft Office 2008
  • Microsoft Office 2004
  • Microsoft Excel Viewer 2003
  • Microsoft Excel Viewer
  • Microsoft Excel 2007
  • Microsoft Excel 2003
  • Microsoft Excel 2002
  • Microsoft Compatibility Pack Word Excel Powerpoint 2007