Sploitus

Exploit for Microsoft Excel SLK File Parsing Buffer Overflow

CVE-2011-1276

saint · 2011-08-15

Exploit Code

MARKDOWN33 lines
## https://sploitus.com/exploit?id=SAINT:FDFDDE641FEF7C560084D33EE8ECDBB7
Added: 08/15/2011  
CVE: CVE-2011-1276  
BID: 48161  
OSVDB: 72924  


### Background

Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. 

### Problem

Microsoft Office Excel is vulnerable to remote code execution due to improper boundary checking while parsing SLK data exchange files that results in buffer overflow. A remote attacker can exploit this vulnerability by enticing a target user to open a malicious Excel file, potentially causing arbitrary code to be injected and executed in the security context of the currently logged on user. 

### Resolution

Apply the patch referenced in Microsoft Security Bulletin 11-045. 

### References

http://secunia.com/advisories/44901/   


### Limitations

Exploit works on Microsoft Excel 2002 SP3 on Windows XP SP3 English (DEP OptIn) with KB2483185. 

The target user must open the exploit file in Microsoft Excel 2002 SP3. 

### Platforms

Windows