Total vulnerabilities in the database
Microsoft Office Excel 2007 SP1 and SP2; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; and Office SharePoint Server 2007 SP1 and SP2 do not validate ZIP headers during decompression of Open XML (.XLSX) documents, which allows remote attackers to execute arbitrary code via a crafted document that triggers access to uninitialized memory locations, aka "Microsoft Office Excel XLSX File Parsing Code Execution Vulnerability."
| Software | From | Fixed in |
|---|---|---|
| microsoft / open_xml_file_format_converter | - | - |
| microsoft / office | 2008 | 2008.x |
| microsoft / office_excel_viewer | - | - |
| microsoft / office_sharepoint_server | 2007-sp1 | 2007-sp1.x |
| microsoft / office | 2004 | 2004.x |
| microsoft / excel | 2007-sp2 | 2007-sp2.x |
| microsoft / excel | 2007-sp1 | 2007-sp1.x |
| microsoft / office_compatibility_pack | 2007-sp2 | 2007-sp2.x |
| microsoft / office_compatibility_pack | 2007-sp1 | 2007-sp1.x |
| microsoft / excel | 2002-sp3 | 2002-sp3.x |
| microsoft / office_sharepoint_server | 2007-sp2 | 2007-sp2.x |
| microsoft / excel | 2003-sp3 | 2003-sp3.x |