> MAPP

Microsoft Active Protections Page (MAPP)
The Microsoft Active Protections Program (MAPP) is a new program for security software providers. Members of MAPP receive security vulnerability information from the Microsoft Security Response Center (MSRC) in advance of Microsoft’s monthly security update.

By receiving the latest vulnerability and security related issues in advance, INCA Internet is better able to provide the fasted protection to our customers.

Below you can find the bulletins released by MAPP and MS Technet.

MS09-067: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (972652) Hit 204

Microsoft Bulletin

CVE

Rating

MS09-067: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (972652)

CVE-2009-3127, CVE-2009-3128,

CVE-2009-3129, CVE-2009-3130,

CVE-2009-3131, CVE-2009-3132,

CVE-2009-3133, CVE-2009-3134

Important

Description

This security update resolves several privately reported vulnerabilities in Microsoft Office Excel. The vulnerabilities could allow remote code execution if a user opens a specially crafted Excel file. An attacker who successfully exploited any of these vulnerabilities could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

 

This security update is rated Important for all supported editions of Microsoft Office Excel 2002, Microsoft Office Excel 2003, Microsoft Office Excel 2007, Microsoft Office 2004 for Mac, and Microsoft Office 2008 for Mac; Open XML File Format Converter for Mac; and all supported versions of Microsoft Office Excel Viewer and Microsoft Office Compatibility Pack.

 

The update addresses the vulnerabilities by modifying the way that Excel opens and parses Excel files, and by modifying the way that Excel handles malformed records.

 

Recommendation. Microsoft recommends that customers apply the update at the earliest opportunity.



Up
List
Down
 
Company Info  l  Support  l  Contact Us  l  Terms of Service    
Copyright (C) INCA Internet Co., Ltd. All rights reserved.