ZDI-CAN-19178: ZDI-23-1787: Microsoft Excel SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2023-33146.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19178?
ZDI-CAN-19178 has a CVSS rating that indicates a critical severity due to remote code execution capabilities.
How do I fix ZDI-CAN-19178?
To mitigate ZDI-CAN-19178, ensure that you update Microsoft Excel to the latest version provided by Microsoft.
What platforms are affected by ZDI-CAN-19178?
ZDI-CAN-19178 specifically affects Microsoft Excel for Mac installations.
What are the attack vectors for ZDI-CAN-19178?
ZDI-CAN-19178 can be exploited by remote attackers requiring user interaction, such as visiting a malicious webpage or opening a malicious file.
What type of vulnerability is ZDI-CAN-19178 classified as?
ZDI-CAN-19178 is classified as a remote code execution vulnerability.