Microsoft Excel Featheader Record Memory Corruption Vulnerability
Microsoft · Excel
Date added (CISA)
2022-03-03
Remediation due
2022-03-24
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.