Executive Summary

Summary
Title Microsoft Updates for Multiple Vulnerabilities
Informations
Name TA08-071A First vendor Publication 2008-03-11
Vendor US-CERT Last vendor Modification 2008-03-11
Severity (Vendor) N/A Revision N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score 9.3 Attack Range Network
Cvss Impact Score 10 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Microsoft has released updates that address vulnerabilities in Microsoft Office, Outlook, Excel, Excel Viewer, Office for Mac, and Office Web Components.

I. Description

Microsoft has released updates to address vulnerabilities that affect Microsoft Office, Outlook, Excel, Excel Viewer, Office for Mac, and Office Web Components as part of the Microsoft Security Bulletin Summary for March 2008. The most severe vulnerabilities could allow a remote, unauthenticated attacker to execute arbitrary code. For more information, see the US-CERT Vulnerability Notes Database.

II. Impact

A remote, unauthenticated attacker could execute arbitrary code, gain elevated privileges, or cause a denial of service.

III. Solution

Apply updates from Microsoft

Microsoft has provided updates for these vulnerabilities in the March
2008 security bulletin. The security bulletin describe any known issues related to the updates. Administrators are encouraged to note these issues and test for any potentially adverse effects.
Administrators should consider using an automated update distribution system such as Windows Server Update Services (WSUS).

Original Source

Url : http://www.us-cert.gov/cas/techalerts/TA08-071A.html

CAPEC : Common Attack Pattern Enumeration & Classification

Id Name
CAPEC-26 Leveraging Race Conditions
CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions
CAPEC-172 Time and State Attacks

CWE : Common Weakness Enumeration

% Id Name
91 % CWE-94 Failure to Control Generation of Code ('Code Injection')
9 % CWE-20 Improper Input Validation

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:14227
 
Oval ID: oval:org.mitre.oval:def:14227
Title: Office Web Components URL Parsing Vulnerability
Description: Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via a crafted URL, aka "Office Web Components URL Parsing Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2006-4695
Version: 7
Platform(s): Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s): Microsoft Office 2000
Microsoft Office XP
Microsoft Visual Studio .NET 2002
Microsoft Visual Studio .NET 2003
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:5114
 
Oval ID: oval:org.mitre.oval:def:5114
Title: Excel Data Validation Record Vulnerability
Description: Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted data validation records, aka "Excel Data Validation Record Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2008-0111
Version: 9
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Vista
Product(s): Microsoft Excel 2000
Microsoft Excel 2002
Microsoft Excel 2003
Microsoft Excel Viewer 2003
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:5190
 
Oval ID: oval:org.mitre.oval:def:5190
Title: Microsoft Office Memory Corruption Vulnerability
Description: Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption from an "allocation error," aka "Microsoft Office Memory Corruption Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2008-0118
Version: 5
Platform(s): Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s): Microsoft Office 2000
Microsoft Office 2002
Microsoft Office 2003
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:5212
 
Oval ID: oval:org.mitre.oval:def:5212
Title: Excel Rich Text Validation Vulnerability
Description: Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka "Excel Rich Text Validation Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2008-0116
Version: 8
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Vista
Product(s): Microsoft Excel 2000
Microsoft Excel 2002
Microsoft Excel 2003
Microsoft Excel Viewer 2003
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:5278
 
Oval ID: oval:org.mitre.oval:def:5278
Title: Outlook URI Vulnerability
Description: Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows user-assisted remote attackers to execute arbitrary code via a crafted mailto URI.
Family: windows Class: vulnerability
Reference(s): CVE-2008-0110
Version: 3
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Product(s): Microsoft Outlook
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:5284
 
Oval ID: oval:org.mitre.oval:def:5284
Title: Excel File Import Vulnerability
Description: Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arbitrary code via a crafted .SLK file that is not properly handled when importing the file, aka "Excel File Import Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2008-0112
Version: 6
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Vista
Product(s): Microsoft Excel 2000
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:5327
 
Oval ID: oval:org.mitre.oval:def:5327
Title: Office Web Components DataSource Vulnerability
Description: Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to DataSource that trigger memory corruption, aka "Office Web Components DataSource Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2007-1201
Version: 6
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Product(s): Microsoft Office 2000
Microsoft Office XP
Microsoft Visual Studio .NET 2002
Microsoft Visual Studio .NET 2003
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:5421
 
Oval ID: oval:org.mitre.oval:def:5421
Title: Microsoft Office Cell Parsing Memory Corruption Vulnerability
Description: Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an "allocation error," aka "Microsoft Office Cell Parsing Memory Corruption Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2008-0113
Version: 3
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Product(s): Microsoft Word Viewer
Microsoft Excel Viewer
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:5456
 
Oval ID: oval:org.mitre.oval:def:5456
Title: Excel Style Record Vulnerability
Description: Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via crafted Style records that trigger memory corruption.
Family: windows Class: vulnerability
Reference(s): CVE-2008-0114
Version: 9
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Vista
Product(s): Microsoft Excel 2000
Microsoft Excel 2002
Microsoft Excel 2003
Microsoft Excel Viewer 2003
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:5508
 
Oval ID: oval:org.mitre.oval:def:5508
Title: Excel Conditional Formatting Vulnerability
Description: Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers to execute arbitrary code via crafted conditional formatting values, aka "Excel Conditional Formatting Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2008-0117
Version: 5
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Vista
Product(s): Microsoft Excel 2000
Microsoft Excel 2002
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:5512
 
Oval ID: oval:org.mitre.oval:def:5512
Title: Excel Formula Parsing Vulnerability
Description: Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas, aka "Excel Formula Parsing Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2008-0115
Version: 9
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Vista
Product(s): Microsoft Excel 2000
Microsoft Excel 2002
Microsoft Excel 2003
Microsoft Excel Viewer 2003
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:5546
 
Oval ID: oval:org.mitre.oval:def:5546
Title: Macro Validation Vulnerability
Description: Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka "Macro Validation Vulnerability," a different vulnerability than CVE-2007-3490.
Family: windows Class: vulnerability
Reference(s): CVE-2008-0081
Version: 8
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Vista
Product(s): Microsoft Excel 2000
Microsoft Excel 2002
Microsoft Excel 2003
Microsoft Excel Viewer 2003
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 2
Application 1
Application 1
Application 4
Application 1
Application 1
Application 7
Application 1
Application 1
Application 2

SAINT Exploits

Description Link
Microsoft Office Drawing Shapes memory corruption vulnerability More info here
Microsoft Excel conditional formatting vulnerability More info here
Microsoft Office Web Components OWC.Spreadsheet.9 ActiveX Control overflow More info here
Microsoft Excel rtAFDesc record invalid pointer access More info here

Open Source Vulnerability Database (OSVDB)

Id Description
42732 Microsoft Excel Macro Validation Unspecified Code Execution

Excel contains a flaw that may allow a malicious user to execute arbitrary code. The issue is triggered when Excel fails to validate specially-crafted macros. It is possible that the flaw may allow arbitrary code execution resulting in a loss of integrity.
42731 Microsoft Excel Conditional Formatting Value Unspecified Code Execution

42730 Microsoft Excel BIFF File Format Rich Text Tag Malformed Tag Memory Corruption

A buffer overflow exists in Excel. The program fails to validate BIFF files resulting in a heap overflow. With a specially crafted file, a context-dependent attacker can cause arbitrary code execution resulting in a loss of integrity.
42725 Microsoft Excel XLS Malformed Formula Memory Corruption

42724 Microsoft Excel Style Record Handling Memory Corruption

42723 Microsoft Excel SLK File Import Unspecified Arbitrary Code Execution

A code execution flaw exists in Excel. The Import function fails to validate SLK files resulting in code execution via an unspecified vector. With a specially crafted file, a context-dependent attacker can cause arbitrary code execution resulting in a loss of integrity.
42722 Microsoft Excel BIFF8 Spreadsheet DVAL Record Handling Arbitrary Code Execution

42712 Microsoft Office Web Components DataSource Page Handling Arbitrary Code Execu...

42711 Microsoft Office Web Components URL Parsing Arbitrary Code Execution

42710 Microsoft Outlook mailto: URI Handling Arbitrary Command Execution

42709 Microsoft Office Unspecified Malformed Document Handling Memory Corruption

An unspecified memory corruption flaw exists in Office. With a specially crafted Office file, an attacker can cause arbitrary code execution resulting in a loss of integrity.
42708 Microsoft Office Excel Document (XLS) Cell Record Rebuilding Memory Corruption

40344 Microsoft Excel Malformed Header File Handling Remote Code Execution

An unspecified memory corruption flaw exists in Excel. With a specially crafted file, a context-dependent attacker can cause arbitrary code execution resulting in a loss of integrity.

Information Assurance Vulnerability Management (IAVM)

Date Description
2008-03-17 IAVM : 2008-A-0015 - Microsoft Office Web Components Remote Code Execution Vulnerabilities
Severity : Category II - VMSKEY : V0015760
2008-03-13 IAVM : 2008-A-0014 - Microsoft Office Remote Code Execution Vulnerabilities
Severity : Category II - VMSKEY : V0015761
2008-03-13 IAVM : 2008-A-0012 - Microsoft Outlook Remote Code Execution Vulnerability
Severity : Category II - VMSKEY : V0015764

Snort® IPS/IDS

Date Description
2014-01-10 Microsoft Office Data Source Control 9.0 ActiveX clsid unicode access
RuleID : 7871 - Revision : 11 - Type : WEB-ACTIVEX
2014-01-10 Microsoft Office Data Source Control 9.0 ActiveX clsid access
RuleID : 7870 - Revision : 16 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Office Web Components OWC.Spreadsheet.9 ActiveX clsid access attempt
RuleID : 4177 - Revision : 20 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Office 2000 and 2002 Web Components Data Source Control ActiveX cls...
RuleID : 4170 - Revision : 19 - Type : BROWSER-PLUGINS
2015-01-06 Microsoft Office Web Components OWC.Spreadsheet.9 ActiveX clsid access attempt
RuleID : 32642 - Revision : 2 - Type : BROWSER-PLUGINS
2014-11-19 Microsoft Office Excel style record overflow attempt
RuleID : 32206 - Revision : 2 - Type : FILE-OFFICE
2014-01-10 Microsoft Office PowerPoint malformed shapeid arbitrary code execution attempt
RuleID : 26663 - Revision : 3 - Type : FILE-OFFICE
2014-01-10 Microsoft Office PowerPoint malformed shapeid arbitrary code execution attempt
RuleID : 25587 - Revision : 6 - Type : FILE-OFFICE
2014-01-10 Microsoft SYmbolic LinK file magic detected
RuleID : 23701 - Revision : 12 - Type : FILE-IDENTIFY
2014-01-10 Microsoft Office Excel macro validation arbitrary code execution attempt
RuleID : 23459 - Revision : 3 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel macro validation arbitrary code execution attempt
RuleID : 23458 - Revision : 3 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel macro validation arbitrary code execution attempt
RuleID : 23457 - Revision : 3 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Outlook arbitrary command line attempt
RuleID : 23211 - Revision : 4 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel style record overflow attempt
RuleID : 22052 - Revision : 8 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel macro validation arbitrary code execution attempt
RuleID : 21158 - Revision : 6 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel macro validation arbitrary code execution attempt
RuleID : 21157 - Revision : 6 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel macro validation arbitrary code execution attempt
RuleID : 21156 - Revision : 6 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel File Importing Code Execution
RuleID : 20062 - Revision : 13 - Type : FILE-OFFICE
2014-01-10 Microsoft Office PowerPoint malformed shapeid arbitrary code execution attempt
RuleID : 18514 - Revision : 15 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel malformed formula parsing code execution attempt
RuleID : 17655 - Revision : 15 - Type : FILE-OFFICE
2014-01-10 Microsoft SYmbolic LinK file magic detected
RuleID : 13585 - Revision : 21 - Type : FILE-IDENTIFY
2014-01-10 CSV file download request
RuleID : 13584 - Revision : 21 - Type : FILE-IDENTIFY
2014-01-10 Microsoft SYmbolic LinK file download request
RuleID : 13583 - Revision : 24 - Type : FILE-IDENTIFY
2014-01-10 Microsoft Excel sst record arbitrary code execution attempt
RuleID : 13582 - Revision : 15 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Web Components remote code execution attempt ActiveX clsid u...
RuleID : 13581 - Revision : 6 - Type : WEB-ACTIVEX
2014-01-10 Microsoft Office Web Components remote code execution attempt ActiveX clsid a...
RuleID : 13580 - Revision : 9 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Office Outlook arbitrary command line attempt
RuleID : 13573 - Revision : 20 - Type : FILE-OFFICE
2014-01-10 Microsoft Office PowerPoint malformed shapeid arbitrary code execution attempt
RuleID : 13572 - Revision : 22 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel dval record arbitrary code execution attempt
RuleID : 13571 - Revision : 24 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel cf record arbitrary code excecution attempt
RuleID : 13570 - Revision : 21 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel macro validation arbitrary code execution attempt
RuleID : 13569 - Revision : 15 - Type : FILE-OFFICE
2014-01-10 Office 2000 and 2002 Web Components Data Source Control ActiveX clsid unicode...
RuleID : 13468 - Revision : 6 - Type : WEB-ACTIVEX
2014-01-10 Office 2000 and 2002 Web Components Spreadsheet ActiveX clsid unicode access
RuleID : 13467 - Revision : 5 - Type : WEB-ACTIVEX

Nessus® Vulnerability Scanner

Date Description
2010-10-20 Name : An application installed on the remote Mac OS X host is affected by multiple ...
File : macosx_ms_office_mar2008.nasl - Type : ACT_GATHER_INFO
2008-03-11 Name : Arbitrary code can be executed on the remote host through Microsoft Excel.
File : smb_nt_ms08-014.nasl - Type : ACT_GATHER_INFO
2008-03-11 Name : Arbitrary code can be executed on the remote host through the email client.
File : smb_nt_ms08-015.nasl - Type : ACT_GATHER_INFO
2008-03-11 Name : Arbitrary code can be executed on the remote host through Microsoft Office.
File : smb_nt_ms08-016.nasl - Type : ACT_GATHER_INFO
2008-03-11 Name : Arbitrary code can be executed on the remote host through Microsoft Office We...
File : smb_nt_ms08-017.nasl - Type : ACT_GATHER_INFO