Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; Office Compatibility Pack SP3; and Excel Services and Word Automation Services in SharePoint Server 2013 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Excel Memory Corruption Vulnerability."

The remote Mac OS X host is running a version of Microsoft Excel that is affected by two memory corruption vulnerabilities.

If an attacker can trick a user on the affected host into opening a specially crafted Excel file, it may be possible to leverage these issues to execute arbitrary code, subject to the user's privileges.

The remote Windows host is running a version of Microsoft Office, Microsoft Excel, Office Compatibility Pack, or Microsoft Excel Viewer that is affected by remote code execution vulnerabilities in the way that Microsoft Excel parses file contents. (CVE-2013-3889, CVE-2013-3890).

If an attacker can trick a user on the affected host into opening a specially crafted file, it may be possible to leverage these issues to read arbitrary files on the target system or execute arbitrary code, subject to the user's privileges.

The versions of Office SharePoint Server, SharePoint Server, Windows SharePoint Services, SharePoint Foundation, or Office Web Apps installed on the remote host are affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in the way     that Microsoft Office Services and Web Apps parse     content in specially crafted files. (CVE-2013-3889)

  - An elevation of privilege vulnerability exists.
    (CVE-2013-3895)

ID	Name	Product	Family	Severity
70340	MS13-085: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2885080) (Mac OS X)	Nessus	MacOS X Local Security Checks	high
70337	MS13-085: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2885080)	Nessus	Windows : Microsoft Bulletins	high
70336	MS13-084: Vulnerabilities in Microsoft SharePoint Server Could Allow Remote Code Execution (2885089)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2013-3889

high

Tenable Plugins

high

high

high