Microsoft KB Archive/934233

= MS07-023: Vulnerabilities in Microsoft Excel could allow remote code execution =

Article ID: 934233

Article Last Modified on 9/11/2007

-

APPLIES TO


 * Microsoft Office Excel 2007
 * Microsoft Office Excel 2003
 * Microsoft Office Excel Viewer 2003
 * Microsoft Excel 2002 Standard Edition
 * Microsoft Excel 2000 Standard Edition
 * Microsoft Office 2004 for Mac Professional Edition
 * Microsoft Office 2004 for Mac Standard Edition
 * Microsoft Office Basic 2007
 * Microsoft Office Enterprise 2007
 * Microsoft Office Home and Student 2007
 * Microsoft Office Professional 2007
 * Microsoft Office Professional Plus 2007
 * Microsoft Office Small Business 2007
 * Microsoft Office Standard 2007
 * Microsoft Office Ultimate 2007

-



INTRODUCTION
Microsoft has released security bulletin MS07-023. The security bulletin contains all the relevant information about the security update. This information includes file manifest information and deployment options. To view the complete security bulletin, visit one of the following Microsoft Web sites, depending on whether you are a home user or an IT professional:  Home users:

http://www.microsoft.com/athome/security/update/bulletins/200705.mspx

 IT professionals:

http://www.microsoft.com/technet/security/bulletin/ms07-023.mspx





Known issues
If you used Microsoft Update or Microsoft Windows Server Update Services (WSUS) to check for security updates on a computer that is running Windows Vista together with a 2007 Microsoft Office suite, the security update may not have been offered. Or, the security update may not have been installed successfully.

Microsoft has revised the Microsoft Update detection logic to address this issue.

Important No changes have been made to the security update. Therefore, if you have already installed the security update, you do not have to reinstall it.

If you use Microsoft Systems Management Server together with the Inventory Tool for Microsoft Updates to deploy security updates to client computers, you may experience the following symptoms.

Note You may also experience these symptoms if you use WSUS to deploy security updates to client computers.
 * You must re-approve the security update.
 * Users are again prompted to install the security update if the security update installation failed previously.
 * The security update is offered to users who have not yet installed the security update in the typical manner.

Note Customers who have already installed the security update successfully do not have to take any additional action.



MORE INFORMATION
For more information about the 2007 Microsoft Office version of this update, click the following article number to view the article in the Microsoft Knowledge Base:

933688 Description of the security update for the 2007 Office system: May 8, 2007

For more information about the Microsoft Office Excel 2007 version of this update, click the following article number to view the article in the Microsoft Knowledge Base:

934670 Description of the security update for Excel 2007: May 8, 2007

For more information about the Microsoft Office Excel 2003 version of this update, click the following article number to view the article in the Microsoft Knowledge Base:

933666 Description of the security update for Excel 2003: May 8, 2007

For more information about the Microsoft Office Excel Viewer 2003 version of this update, click the following article number to view the article in the Microsoft Knowledge Base:

934445 Description of the security update for Excel Viewer 2003: May 8, 2007

For more information about the Microsoft Excel 2002 version of this update, click the following article number to view the article in the Microsoft Knowledge Base:

934453 Description of the security update for Excel 2002: May 8, 2007

For more information about the Microsoft Excel 2000 version of this update, click the following article number to view the article in the Microsoft Knowledge Base:

934447 Description of the security update for Excel 2000: May 8, 2007

For more information about the Microsoft Office 2004 for Mac version of this update, click the following article number to view the article in the Microsoft Knowledge Base:

936749 Description of the Microsoft Office 2004 for Mac 11.3.5 Update

Additional query words: excel2007 excel2k7 excel12 xl2007 xl2k7 xl12 excel2003 excel2k3 excel11 xl2003 xl2k3 xl11 excelviewer2003 excelviewer2k3 excelviewer11 xlviewer2003 xlviewer2k3 xlviewer11 excel2002 excel2k2 excel10 xl2002 xl2k2 xl10 excel2000 excel2k excel9 xl2000 xl2k xl9 office2007 office2k7 office12 off2007 off2k7 off12 security_patch security_update bug flaw malicious attacker exploit registry unauthenticated buffer overrun overflow specially-formed scope specially-crafted denial of service DoS TSE

Keywords: kbbug kbfix kbsecvulnerability kbqfe kbsecurity kbsecbulletin kbpubtypekc kbexpertisebeginner KB934233

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.