Vulnerabilities > Microsoft > Excel > 2003

DATE CVE VULNERABILITY TITLE RISK
2013-09-11 CVE-2013-3159 Improper Input Validation vulnerability in Microsoft Excel 2003/2007/2010
Microsoft Excel 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Excel Viewer; and Microsoft Office Compatibility Pack SP3 allow remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka "XML External Entities Resolution Vulnerability."
network
microsoft CWE-20
4.3
2013-09-11 CVE-2013-3158 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Microsoft Excel 2003/2007
Microsoft Excel 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
network
microsoft CWE-119
critical
9.3
2012-11-14 CVE-2012-1887 Resource Management Errors vulnerability in Microsoft Excel and Office
Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SST Invalid Length Use After Free Vulnerability."
network
microsoft CWE-399
critical
9.3
2012-11-14 CVE-2012-1886 Buffer Errors vulnerability in Microsoft Excel, Excel Viewer and Office Compatibility Pack
Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Memory Corruption Vulnerability."
network
microsoft CWE-119
critical
9.3
2012-11-14 CVE-2012-1885 Buffer Errors vulnerability in Microsoft Excel, Office and Office Compatibility Pack
Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SerAuxErrBar Heap Overflow Vulnerability."
network
microsoft CWE-119
critical
9.3
2012-05-09 CVE-2012-1847 Permissions, Privileges, and Access Controls vulnerability in Microsoft products
Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Series Record Parsing Type Mismatch Could Result in Remote Code Execution Vulnerability."
network
microsoft CWE-264
critical
9.3
2012-05-09 CVE-2012-0184 Permissions, Privileges, and Access Controls vulnerability in Microsoft products
Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SXLI Record Memory Corruption Vulnerability."
network
microsoft CWE-264
critical
9.3
2012-05-09 CVE-2012-0143 Resource Management Errors vulnerability in Microsoft Excel and Office
Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Memory Corruption Using Various Modified Bytes Vulnerability."
network
microsoft CWE-399
critical
9.3
2012-05-09 CVE-2012-0142 Resource Management Errors vulnerability in Microsoft products
Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel File Format Memory Corruption in OBJECTLINK Record Vulnerability."
network
microsoft CWE-399
critical
9.3
2012-05-09 CVE-2012-0141 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Microsoft products
Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel File Format Memory Corruption Vulnerability."
network
microsoft CWE-119
critical
9.3