Microsoft Office Excel SST Record Invalid Length Use After Free

Strike ID:
E12-07603
CVSS:
9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)
False Positive:
f
Variants:
1
Year:
2012

Description

This strike exploits a code execution vulnerability in Microsoft Office Excel. The vulnerability is due to a use-after-free error while parsing SST Records in Excel files. This vulnerability can lead to arbitrary code execution in the context of the current user.

CVE

Bid