Alert GCSA-08100 - MS08-057 Vulnerabilita' in Microsoft Excel (956416)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



************************************************************************

      Alert ID : GCSA-08100
          Data : 15 Ottobre 2008
        Titolo : MS08-057 Vulnerabilita' in Microsoft Excel

************************************************************************


:: Descrizione del problema

   Questo aggiornamento di sicurezza risolve tre vulnerabilita'
   relative a Microsoft Office Excel.

   Le vulnerabilita' consentono l'esecuzione remota di codice arbitrario
   se un attaccante apre file di Excel appositamente predisposti.
   Un attaccante che sia riuscito a sfruttare queste vulnerabilita'
   potrebbe ottenere il controllo completo del sistema.


:: Software e Sistemi affetti

   Microsoft Office 2000 SP3

   Microsoft Office XP SP3

   Microsoft Office 2003 SP2
   Microsoft Office 2003 SP3

   2007 Microsoft Office System
   2007 Microsoft Office System SP1

   Microsoft Office Excel Viewer

   Microsoft Office Excel Viewer 2003
   Microsoft Office Excel Viewer 2003 SP3

   Microsoft Office Compatibility Pack
   Microsoft Office Compatibility Pack SP1

   Microsoft Office SharePoint Server 2007
   Microsoft Office SharePoint Server 2007 SP1
   Microsoft Office SharePoint Server 2007 x64
   Microsoft Office SharePoint Server 2007 x64 SP1

   Microsoft Office 2004 per Mac

   Microsoft Office 2008 per Mac

   Open XML File Format Converter per Mac


:: Impatto

   Esecuzione remota di codice arbritario


:: Soluzioni

   Applicare la patch segnalata nel bollettino Microsoft MS08-057
   http://www.microsoft.com/technet/security/bulletin/ms08-057.mspx


:: Riferimenti

Microsoft Security Bulletin MS08-057
   http://www.microsoft.com/technet/security/bulletin/ms08-059.mspx

FrSirt:
   http://www.frsirt.com/english/advisories/2008/2808

Secunia:
   http://secunia.com/advisories/32211/

SecurityFocus:
   http://www.securityfocus.com/bid/31705

CVE Mitre:
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3477
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3471
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4019


-----BEGIN PGP SIGNATURE-----

iQCVAwUBSPX1yPOB+SpikaiRAQJq+wP/fCXLLkBLgiJWHru0u9RshqV4aIT3fex8
mFwKrPsxjYIJCsE7dKfnrAvVWZY62qmiRUgVdfHr9310dGDKOgaLj4K3e9tupbap
mjh6eh2PZaTjIvdBp1oGLWuCwCJz8C3h90EipeJpACj+ilKviDqxDHtB5XzjLcJj
Np45TFL81b8=
=ahS5
-----END PGP SIGNATURE-----