AOH :: HP Unsorted C :: BX2953.HTM

Excel 2007 Curious vulnerability



Curious vulnerability in Excel 2007
Curious vulnerability in Excel 2007



Product: Microsoft Excel 2007
OS: Windows XP

Hello

inform them that, I found a vulnerability in curiosity rather excel, it is that you can run Javascript code (XSS), it seems certain there html tags that excel those injected with these and other code can execute javascript, so this curious flaw is that following the execution of the xss excel breaks, discussing this with a debugger the result is as follows ..

Access violation when reading [00000034]

Well the procedure for conducting the test is fairly basic concept down here leave an address where the xss only have to select it and copy it to an Excel spreadsheet and may see vulnerability.

(will have to see the source code of the page because txt files in geocities interpret tags ...)

http://es.geocities.com/jplopezy/excelxss.txt

greetings!


Juan Pablo Lopez Yacubian


The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.