Microsoft Excel XF Record Unchecked Inheritance (POP3)

Strike ID:
E10-lw304
CVSS:
5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)
False Positive:
f
Variants:
1
Year:
2010

Description

This strike triggers a memory corruption vulnerability in Microsoft Excel 2003. This flaw is due to an unchecked inheritance of cell styles in the Flags field (specifically the ixfParent) in XF records, and results in denial of services conditions, effectively killing all instances of Excel by way of a specially crafted malicious XLS file.

References