Arbitrary Code Execution in Microsoft Excel

Reported October 12, 2004, by Microsoft

VERSIONS AFFECTED

Microsoft Office XP (SP2 and Prior) Microsoft Office 2000 (SP3 and Prior) Microsoft Office 2001 and prior for MacIntosh

DESCRIPTION
A vulnerability in the Microsoft Excel could result in the arbitrary execution of code on the vulnerable system. This vulnerability is a result of an unchecked buffer, and a potential attacker who successfully exploited the vulnerability could take complete control of an affected system.

VENDOR RESPONSE
Microsoft has released bulletin MS04-033, "Vulnerability in Microsoft Excel Could Allow Remote Code Execution (886836)," to address this vulnerability and recommends that affected users apply the appropriate patch listed in the bulletin.

CREDIT
Discovered by Brett Moore.