• info
• discussion
• exploit
• solution
• references

Microsoft Excel XML Stylesheet Arbitrary Code Execution Vulnerability

Solution:
Microsoft has released fixes which address this issue. Office users should visit the Office Product Updates page at:

http://office.microsoft.com/productupdates/default.aspx


Microsoft Excel 2000

• Microsoft exc0901.exe
  Excel 2000 Update: June 19, 2002
  http://download.microsoft.com/download/excel2000/exc0901/6-19-2002/win 98mexp/en-us/exc0901.exe


• Microsoft exc0901a.exe
  Excel 2000 Update: June 19, 2002 - Administrative version
  http://download.microsoft.com/download/Excel2000/Patch/exc0901/W982KMe XP/EN-US/exc0901a.exe

Microsoft Excel 2002

• Microsoft exc1002.exe
  Excel 2002 Update: June 19, 2002
  http://download.microsoft.com/download/Excel2002/exc1002/6-19-2002/WIN 98MeXP/EN-US/exc1002.exe


• Microsoft exc1002a.exe
  Excel 2002 Update: June 19, 2002 - Administrative version
  http://download.microsoft.com/download/Excel2002/Patch/exc1002/W982KMe XP/EN-US/exc1002a.exe

Microsoft Excel 2000 SR1

• Microsoft exc0901.exe
  Excel 2000 Update: June 19, 2002
  http://download.microsoft.com/download/excel2000/exc0901/6-19-2002/win 98mexp/en-us/exc0901.exe


• Microsoft exc0901a.exe
  Excel 2000 Update: June 19, 2002 - Administrative version
  http://download.microsoft.com/download/Excel2000/Patch/exc0901/W982KMe XP/EN-US/exc0901a.exe

Microsoft Excel 2000 SP2

• Microsoft exc0901.exe
  Excel 2000 Update: June 19, 2002
  http://download.microsoft.com/download/excel2000/exc0901/6-19-2002/win 98mexp/en-us/exc0901.exe


• Microsoft exc0901a.exe
  Excel 2000 Update: June 19, 2002 - Administrative version
  http://download.microsoft.com/download/Excel2000/Patch/exc0901/W982KMe XP/EN-US/exc0901a.exe

Microsoft Excel 2002 SP1

• Microsoft exc1002.exe
  Excel 2002 Update: June 19, 2002
  http://download.microsoft.com/download/Excel2002/exc1002/6-19-2002/WIN 98MeXP/EN-US/exc1002.exe


• Microsoft exc1002a.exe
  Excel 2002 Update: June 19, 2002 - Administrative version
  http://download.microsoft.com/download/Excel2002/Patch/exc1002/W982KMe XP/EN-US/exc1002a.exe