Article ID: 954066 - Last Review: May 9, 2012 - Revision: 4.0

MS08-043: Vulnerabilities in Microsoft Excel could allow remote code execution

System TipThis article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.

On This Page

Expand all | Collapse all

INTRODUCTION

Microsoft has released security bulletin MS08-043. To view the complete security bulletin, visit one of the following Microsoft Web sites:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update (http://support.microsoft.com/ph/6527)

Security solutions for IT professionals: TechNet Security Troubleshooting and Support (http://technet.microsoft.com/security/bb980617.aspx)

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center (http://support.microsoft.com/contactus/cu_sc_virsec_master)

Local support according to your country: International Support (http://support.microsoft.com/common/international.aspx)

Additional information about this security update

For more information about this security update and for information about any known issues with specific releases of this software, click the following article numbers to view the articles in the Microsoft Knowledge Base:
951546  (http://support.microsoft.com/kb/951546/ ) MS08-043: Description of the security update for Microsoft Office Excel 2007: August 12, 2008
951548  (http://support.microsoft.com/kb/951548/ ) MS08-043: Description of the security update for Microsoft Office Excel 2003: August 12, 2008
951551  (http://support.microsoft.com/kb/951551/ ) MS08-043: Description of the security update for Microsoft Excel 2002: August 12, 2008
951582  (http://support.microsoft.com/kb/951582/ ) MS08-043: Description of the security update for Microsoft Excel 2000: August 12, 2008
951589  (http://support.microsoft.com/kb/951589/ ) MS08-043: Description of the security update for Microsoft Office Excel Viewer 2003: August 12, 2008
951596  (http://support.microsoft.com/kb/951596/ ) MS08-043: Description of the security update for Compatibility Pack for the 2007 Microsoft Office system: August 12, 2008
953397  (http://support.microsoft.com/kb/953397/ ) MS08-043: Description of the security update for Microsoft Office SharePoint Server 2007: August 12, 2008
955472  (http://support.microsoft.com/kb/955472/ ) MS08-043: Description of the security update for Microsoft Excel Viewer: August 12, 2007
956343  (http://support.microsoft.com/kb/956343/ ) Description of the Microsoft Office 2004 11.5.1 Update
956344  (http://support.microsoft.com/kb/956344/ ) Description of the Microsoft Office 2008 for Mac 12.1.2 Update

File information

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Excel 2007

Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Excel.exe12.0.6323.500017,929,75203-Jul-200823:08
Xlcall32.dll12.0.6300.500013,36808-Dec-200703:59

Excel 2003

Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Excel.exe11.0.8220.010,354,17615-May-200822:42

Excel 2002

Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Excel.exe10.0.6845.09,068,54420-Jun-200821:37

Excel 2000

Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Excel.exe9.0.0.89717,237,67723-May-200818:17

Excel Viewer 2003

Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Xlview.exe11.0.8220.05,276,67215-May-200822:31

Compatibility Pack for the 2007 Microsoft Office system

Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Excelcnv.exe12.0.6323.500014,714,39203-Jul-200801:03

SharePoint Server 2007, 32-bit versions

Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Atl80.dll8.0.50727.76296,25607-Dec-200700:22
Ecscalcserver.dll12.0.6300.5000353,31207-Dec-200708:02
Ecsinterop.dll12.0.6300.5000151,07207-Dec-200708:02
Mfc80.dll8.0.50727.7621,101,82407-Dec-200700:22
Mfc80chs.dll8.0.50727.76240,96007-Dec-200700:22
Mfc80cht.dll8.0.50727.76245,05607-Dec-200700:22
Mfc80deu.dll8.0.50727.76265,53607-Dec-200700:22
Mfc80enu.dll8.0.50727.76257,34407-Dec-200700:22
Mfc80esp.dll8.0.50727.76261,44007-Dec-200700:22
Mfc80fra.dll8.0.50727.76261,44007-Dec-200700:22
Mfc80ita.dll8.0.50727.76261,44007-Dec-200700:22
Mfc80jpn.dll8.0.50727.76249,15207-Dec-200700:22
Mfc80kor.dll8.0.50727.76249,15207-Dec-200700:22
Mfc80u.dll8.0.50727.7621,093,12007-Dec-200700:22
Mfcm80.dll8.0.50727.76269,63207-Dec-200700:22
Mfcm80u.dll8.0.50727.76257,85607-Dec-200700:22
Msmdlocal.dll9.0.3042.015,926,64007-Dec-200700:28
Msmgdsrv.dll9.0.3042.06,040,43207-Dec-200700:28
Msolap90.dll9.0.3042.04,298,09607-Dec-200700:28
Msolui90.dll9.0.3042.0276,33607-Dec-200700:28
Msvcm80.dll8.0.50727.762479,23207-Dec-200700:22
Msvcp80.dll8.0.50727.762548,86407-Dec-200700:22
Msvcr80.dll8.0.50727.762626,68807-Dec-200700:22
Nosxs_atl80.dll8.0.50727.76296,25607-Dec-200700:22
Nosxs_mfc80.dll8.0.50727.7621,101,82407-Dec-200700:22
Nosxs_mfc80chs.dll8.0.50727.76240,96007-Dec-200700:22
Nosxs_mfc80cht.dll8.0.50727.76245,05607-Dec-200700:22
Nosxs_mfc80deu.dll8.0.50727.76265,53607-Dec-200700:22
Nosxs_mfc80enu.dll8.0.50727.76257,34407-Dec-200700:22
Nosxs_mfc80esp.dll8.0.50727.76261,44007-Dec-200700:22
Nosxs_mfc80fra.dll8.0.50727.76261,44007-Dec-200700:22
Nosxs_mfc80ita.dll8.0.50727.76261,44007-Dec-200700:22
Nosxs_mfc80jpn.dll8.0.50727.76249,15207-Dec-200700:22
Nosxs_mfc80kor.dll8.0.50727.76249,15207-Dec-200700:22
Nosxs_mfc80u.dll8.0.50727.7621,093,12007-Dec-200700:22
Nosxs_mfcm80.dll8.0.50727.76269,63207-Dec-200700:22
Nosxs_mfcm80u.dll8.0.50727.76257,85607-Dec-200700:22
Nosxs_msvcm80.dll8.0.50727.762479,23207-Dec-200700:22
Nosxs_msvcp80.dll8.0.50727.762548,86407-Dec-200700:22
Nosxs_msvcr80.dll8.0.50727.762626,68807-Dec-200700:22
Sql90.xslNot Applicable38,02907-Dec-200700:28
Ul_atl80.dll8.0.50727.76296,25607-Dec-200700:22
Ul_mfc80.dll8.0.50727.7621,101,82407-Dec-200700:22
Ul_mfc80chs.dll8.0.50727.76240,96007-Dec-200700:22
Ul_mfc80cht.dll8.0.50727.76245,05607-Dec-200700:22
Ul_mfc80deu.dll8.0.50727.76265,53607-Dec-200700:22
Ul_mfc80enu.dll8.0.50727.76257,34407-Dec-200700:22
Ul_mfc80esp.dll8.0.50727.76261,44007-Dec-200700:22
Ul_mfc80fra.dll8.0.50727.76261,44007-Dec-200700:22
Ul_mfc80ita.dll8.0.50727.76261,44007-Dec-200700:22
Ul_mfc80jpn.dll8.0.50727.76249,15207-Dec-200700:22
Ul_mfc80kor.dll8.0.50727.76249,15207-Dec-200700:22
Ul_mfc80u.dll8.0.50727.7621,093,12007-Dec-200700:22
Ul_mfcm80.dll8.0.50727.76269,63207-Dec-200700:22
Ul_mfcm80u.dll8.0.50727.76257,85607-Dec-200700:22
Ul_msvcm80.dll8.0.50727.762479,23207-Dec-200700:22
Ul_msvcp80.dll8.0.50727.762548,86407-Dec-200700:22
Ul_msvcr80.dll8.0.50727.762626,68807-Dec-200700:22
Xlcall32.dll12.0.6300.500013,36808-Dec-200703:59
Xlsrv.dll12.0.6317.50007,727,13630-May-200820:40
Xlsrv.webservices.api.dll12.0.6300.500046,09607-Dec-200708:58
Xmlrw.dll2.0.3609.0169,84007-Dec-200700:28
Xmlrwbin.dll2.0.3609.0123,76007-Dec-200700:28

SharePoint Server 2007, 64-bit versions

Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Atl80.dll8.0.50727.762113,15207-Dec-200700:22
Ecscalcserver.dll12.0.6300.5000353,31207-Dec-200707:00
Ecsinterop.dll12.0.6300.5000224,80007-Dec-200707:00
Mfc80.dll8.0.50727.7621,656,32007-Dec-200700:22
Mfc80chs.dll8.0.50727.76233,28007-Dec-200700:22
Mfc80cht.dll8.0.50727.76233,79207-Dec-200700:22
Mfc80deu.dll8.0.50727.76254,27207-Dec-200700:22
Mfc80enu.dll8.0.50727.76247,10407-Dec-200700:22
Mfc80esp.dll8.0.50727.76251,71207-Dec-200700:22
Mfc80fra.dll8.0.50727.76252,73607-Dec-200700:22
Mfc80ita.dll8.0.50727.76252,22407-Dec-200700:22
Mfc80jpn.dll8.0.50727.76238,91207-Dec-200700:22
Mfc80kor.dll8.0.50727.76238,40007-Dec-200700:22
Mfc80u.dll8.0.50727.7621,652,73607-Dec-200700:22
Mfcm80.dll8.0.50727.76265,53607-Dec-200700:22
Mfcm80u.dll8.0.50727.76264,00007-Dec-200700:22
Msmdlocal.dll9.0.3042.015,926,64007-Dec-200700:28
Msmdlocal.dll9.0.3042.030,798,19207-Dec-200700:24
Msmgdsrv.dll9.0.3042.06,040,43207-Dec-200700:28
Msmgdsrv.dll9.0.3042.09,100,65607-Dec-200700:24
Msolap90.dll9.0.3042.04,298,09607-Dec-200700:28
Msolap90.dll9.0.3042.05,847,92007-Dec-200700:24
Msolui90.dll9.0.3042.0276,33607-Dec-200700:28
Msolui90.dll9.0.3042.0321,39207-Dec-200700:24
Msvcm80.dll8.0.50727.762516,09607-Dec-200700:22
Msvcp80.dll8.0.50727.7621,061,37607-Dec-200700:22
Msvcr80.dll8.0.50727.762796,67207-Dec-200700:22
Sql90.xslNot Applicable38,02907-Dec-200700:28
Sql90.xslNot Applicable38,02907-Dec-200700:24
Ul_atl80.dll8.0.50727.762113,15207-Dec-200700:22
Ul_mfc80.dll8.0.50727.7621,656,32007-Dec-200700:22
Ul_mfc80chs.dll8.0.50727.76233,28007-Dec-200700:22
Ul_mfc80cht.dll8.0.50727.76233,79207-Dec-200700:22
Ul_mfc80deu.dll8.0.50727.76254,27207-Dec-200700:22
Ul_mfc80enu.dll8.0.50727.76247,10407-Dec-200700:22
Ul_mfc80esp.dll8.0.50727.76251,71207-Dec-200700:22
Ul_mfc80fra.dll8.0.50727.76252,73607-Dec-200700:22
Ul_mfc80ita.dll8.0.50727.76252,22407-Dec-200700:22
Ul_mfc80jpn.dll8.0.50727.76238,91207-Dec-200700:22
Ul_mfc80kor.dll8.0.50727.76238,40007-Dec-200700:22
Ul_mfc80u.dll8.0.50727.7621,652,73607-Dec-200700:22
Ul_mfcm80.dll8.0.50727.76265,53607-Dec-200700:22
Ul_mfcm80u.dll8.0.50727.76264,00007-Dec-200700:22
Ul_msvcm80.dll8.0.50727.762516,09607-Dec-200700:22
Ul_msvcp80.dll8.0.50727.7621,061,37607-Dec-200700:22
Ul_msvcr80.dll8.0.50727.762796,67207-Dec-200700:22
Xlsrv.dll.x6412.0.6317.500014,471,20023-May-200809:34
Xlsrv.webservices.api.dll12.0.6300.500046,09607-Dec-200708:58
Xmlrw.dll2.0.3609.0169,84007-Dec-200700:28
Xmlrw.dll2.0.3609.0282,48007-Dec-200700:24
Xmlrwbin.dll2.0.3609.0123,76007-Dec-200700:28
Xmlrwbin.dll2.0.3609.0199,53607-Dec-200700:24

Excel Viewer 2007

Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Xlview.exe12.0.6324.500012,870,69617-Jul-200803:05

APPLIES TO
  • Microsoft Office 2003 Service Pack 2, when used with:
    • Microsoft Office Excel 2003
  • Microsoft Office 2003 Service Pack 3, when used with:
    • Microsoft Office Excel 2003
  • Microsoft Office Excel 2007, when used with:
    • Microsoft Office Professional 2007
    • Microsoft Office Standard 2007
    • Microsoft Office Ultimate 2007
  • Microsoft Office Excel Viewer 2003
  • Microsoft Office Excel Viewer 2003 Service Pack 3
  • Microsoft Office Excel Viewer 2007
  • Microsoft Office 2007 Compatibility Pack Service Pack 1
  • Microsoft Office SharePoint Server 2007
  • Microsoft Office 2004 for Mac Professional Edition
  • Microsoft Office 2004 for Mac Standard Edition
  • Microsoft Office 2004 for Mac Student and Teacher Edition
  • Microsoft Office 2008 for Mac
  • Microsoft Office 2008 for Mac Home and Student Edition
  • Microsoft Office 2008 for Mac Special Media Edition
Keywords: 
kbfix kbbug kbsecvulnerability kbsecbulletin kbsecurity kbqfe kbexpertisebeginner KB954066