MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow

This module exploits a vulnerability found in Excel of Microsoft Office 2007. By supplying a malformed .xlb file, an attacker can control the content (source) of a memcpy routine, and the number of bytes to copy, therefore causing a stack- based buffer overflow. This results aribrary code execution under the context of user the user.

Search Other Modules

Exploit Rank

• Normal

Exploit Authors

• Aniway < >
• abysssec < >
• sinn3r < sinn3r [at] metasploit.com >
• juan vazquez < >

Vulnerability References

• CVE-2011-0105
• OSVDB-71765
• MSB-MS11-021
• http://www.zerodayinitiative.com/advisories/ZDI-11-121/
• http://www.abysssec.com/blog/2011/11/02/microsoft-excel-2007-sp2-buffer-overw...

Exploit Targets

• 0 - Microsoft Office Excel 2007 on Windows XP (default)
• 1 - Microsoft Office Excel 2007 SP2 on Windows XP

Exploit Development

• Source Code
• History

Similar Exploit Modules

• exploit/windows/fileformat/a-pdf_wav_to_mp3
• exploit/windows/fileformat/acdsee_fotoslate_string
• exploit/windows/fileformat/acdsee_xpm
• exploit/windows/fileformat/activepdf_webgrabber
• exploit/windows/fileformat/adobe_collectemailinfo
• exploit/windows/fileformat/adobe_cooltype_sing
• exploit/windows/fileformat/adobe_flashplayer_button
• exploit/windows/fileformat/adobe_flashplayer_newfunction
• exploit/windows/fileformat/adobe_flatedecode_predictor02
• exploit/windows/fileformat/adobe_geticon

Exploit Usage Information

Exploit Module Options