First published: Thu Oct 25 2012(Updated: )
Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow remote attackers to cause a denial of service (read access violation and application crash) via a crafted spreadsheet file, as demonstrated by a .xls file with battery voltage data.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Office Excel | =2007 | |
Microsoft Office Excel Viewer | ||
Microsoft Office | =2007 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-5672 has a severity rating that indicates it can lead to denial of service through application crashes.
To remediate CVE-2012-5672, ensure you apply the latest security updates provided by Microsoft for Excel and the Excel Viewer.
CVE-2012-5672 affects Microsoft Excel 2007, Microsoft Excel Viewer, and Microsoft Office 2007.
CVE-2012-5672 is classified as a denial of service vulnerability caused by crafted spreadsheet files.
Yes, CVE-2012-5672 can be exploited remotely by sending a specially crafted spreadsheet file to the target system.