(Apple Issues Fix for iPhone) Mac OS X QuickLook Bug in Processing Excel Columns Lets Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1021267 |
|
SecurityTracker URL: http://securitytracker.com/id/1021267
|
|
CVE Reference:
CVE-2008-4211
(Links to External Site)
|
Date: Nov 21 2008
|
Impact:
Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 1.0 - 2.1
|
Description:
A vulnerability was reported in Mac OS X QuickLook. A remote user can cause arbitrary code to be executed on the target user's system. Apple iPhone is affected.
A remote user can create a specially crafted Microsoft Excel file that, when downloaded or viewed by the target user, will trigger a signed variable error in processing Excel columns and execute arbitrary code on the target system.
Systems prior to version 10.5 are not affected.
|
Impact:
A remote user can create a file that, when downloaded or viewed by the target user, will execute arbitrary code on the target user's system.
|
Solution:
Apple has issued a fixed version (2.2) of iPhone, which is affected by this vulnerability.
The Apple advisory is available at:
http://support.apple.com/kb/HT3318
|
Vendor URL: support.apple.com/kb/HT3318 (Links to External Site)
|
Cause:
Boundary error
|
Underlying OS:
|
|
Message History:
This archive entry is a follow-up to the message listed below.
|
Source Message Contents
|
Date: Fri, 21 Nov 2008 02:47:32 -0500
Subject: Apple iPhone
|
APPLE-SA-2008-11-20 iPhone OS 2.2 and iPhone OS for iPod touch 2.2
Office Viewer
CVE-ID: CVE-2008-4211
Available for: iPhone OS 1.0 through 2.1,
iPhone OS for iPod touch 1.1 through 2.1
Impact: Viewing a maliciously crafted Microsoft Excel file may lead
to an unexpected application termination or arbitrary code execution
Description: A signedness issue in Office Viewer's handling of
columns in Microsoft Excel files may result in an out-of-bounds
memory access. Viewing a maliciously crafted Microsoft Excel file may
lead to an unexpected application termination or arbitrary code
execution. This update addresses the issue by ensuring that the
affected index values are not negative. Credit: Apple.
|
|
