Article ID: 954066 - Last Review: August 12, 2008 - Revision: 1.1

MS08-043: Vulnerabilities in Microsoft Excel could allow remote code execution

On This Page

Expand all | Collapse all

INTRODUCTION

Microsoft has released security bulletin MS08-043. To view the complete security bulletin, visit one of the following Microsoft Web sites:

How to obtain help and support for this security update

For home users, no-charge support is available by calling 1-866-PCSAFETY in the United States and Canada or by contacting your local Microsoft subsidiary. For more information about how to contact your local Microsoft subsidiary for support issues with security updates, visit the Microsoft International Support Web site:
http://support.microsoft.com/common/international.aspx?rdpath=4 (http://support.microsoft.com/common/international.aspx?rdpath=4)
North American customers can also obtain instant access to unlimited no-charge e-mail support or to unlimited individual chat support by visiting the following Microsoft Web site:
http://support.microsoft.com/oas/default.aspx?&prid=7552 (http://support.microsoft.com/oas/default.aspx?&prid=7552)
For enterprise customers, support for security updates is available through your usual support contacts.

Additional information about this security update

For more information about this security update and for information about any known issues with specific releases of this software, click the following article numbers to view the articles in the Microsoft Knowledge Base:
951546  (http://support.microsoft.com/kb/951546/ ) MS08-043: Description of the security update for Microsoft Office Excel 2007: August 12, 2008
951548  (http://support.microsoft.com/kb/951548/ ) MS08-043: Description of the security update for Microsoft Office Excel 2003: August 12, 2008
951551  (http://support.microsoft.com/kb/951551/ ) MS08-043: Description of the security update for Microsoft Excel 2002: August 12, 2008
951582  (http://support.microsoft.com/kb/951582/ ) MS08-043: Description of the security update for Microsoft Excel 2000: August 12, 2008
951589  (http://support.microsoft.com/kb/951589/ ) MS08-043: Description of the security update for Microsoft Office Excel Viewer 2003: August 12, 2008
951596  (http://support.microsoft.com/kb/951596/ ) MS08-043: Description of the security update for Compatibility Pack for the 2007 Microsoft Office system: August 12, 2008
953397  (http://support.microsoft.com/kb/953397/ ) MS08-043: Description of the security update for Microsoft Office SharePoint Server 2007: August 12, 2008
955472  (http://support.microsoft.com/kb/955472/ ) MS08-043: Description of the security update for Microsoft Excel Viewer: August 12, 2007
956343  (http://support.microsoft.com/kb/956343/ ) Description of the Microsoft Office 2004 11.5.1 Update
956344  (http://support.microsoft.com/kb/956344/ ) Description of the Microsoft Office 2008 for Mac 12.1.2 Update

File information

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Excel 2007

Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Excel.exe12.0.6323.500017,929,75203-Jul-200823:08
Xlcall32.dll12.0.6300.500013,36808-Dec-200703:59

Excel 2003

Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Excel.exe11.0.8220.010,354,17615-May-200822:42

Excel 2002

Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Excel.exe10.0.6845.09,068,54420-Jun-200821:37

Excel 2000

Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Excel.exe9.0.0.89717,237,67723-May-200818:17

Excel Viewer 2003

Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Xlview.exe11.0.8220.05,276,67215-May-200822:31

Compatibility Pack for the 2007 Microsoft Office system

Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Excelcnv.exe12.0.6323.500014,714,39203-Jul-200801:03

SharePoint Server 2007, 32-bit versions

Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Atl80.dll8.0.50727.76296,25607-Dec-200700:22
Ecscalcserver.dll12.0.6300.5000353,31207-Dec-200708:02
Ecsinterop.dll12.0.6300.5000151,07207-Dec-200708:02
Mfc80.dll8.0.50727.7621,101,82407-Dec-200700:22
Mfc80chs.dll8.0.50727.76240,96007-Dec-200700:22
Mfc80cht.dll8.0.50727.76245,05607-Dec-200700:22
Mfc80deu.dll8.0.50727.76265,53607-Dec-200700:22
Mfc80enu.dll8.0.50727.76257,34407-Dec-200700:22
Mfc80esp.dll8.0.50727.76261,44007-Dec-200700:22
Mfc80fra.dll8.0.50727.76261,44007-Dec-200700:22
Mfc80ita.dll8.0.50727.76261,44007-Dec-200700:22
Mfc80jpn.dll8.0.50727.76249,15207-Dec-200700:22
Mfc80kor.dll8.0.50727.76249,15207-Dec-200700:22
Mfc80u.dll8.0.50727.7621,093,12007-Dec-200700:22
Mfcm80.dll8.0.50727.76269,63207-Dec-200700:22
Mfcm80u.dll8.0.50727.76257,85607-Dec-200700:22
Msmdlocal.dll9.0.3042.015,926,64007-Dec-200700:28
Msmgdsrv.dll9.0.3042.06,040,43207-Dec-200700:28
Msolap90.dll9.0.3042.04,298,09607-Dec-200700:28
Msolui90.dll9.0.3042.0276,33607-Dec-200700:28
Msvcm80.dll8.0.50727.762479,23207-Dec-200700:22
Msvcp80.dll8.0.50727.762548,86407-Dec-200700:22
Msvcr80.dll8.0.50727.762626,68807-Dec-200700:22
Nosxs_atl80.dll8.0.50727.76296,25607-Dec-200700:22
Nosxs_mfc80.dll8.0.50727.7621,101,82407-Dec-200700:22
Nosxs_mfc80chs.dll8.0.50727.76240,96007-Dec-200700:22
Nosxs_mfc80cht.dll8.0.50727.76245,05607-Dec-200700:22
Nosxs_mfc80deu.dll8.0.50727.76265,53607-Dec-200700:22
Nosxs_mfc80enu.dll8.0.50727.76257,34407-Dec-200700:22
Nosxs_mfc80esp.dll8.0.50727.76261,44007-Dec-200700:22
Nosxs_mfc80fra.dll8.0.50727.76261,44007-Dec-200700:22
Nosxs_mfc80ita.dll8.0.50727.76261,44007-Dec-200700:22
Nosxs_mfc80jpn.dll8.0.50727.76249,15207-Dec-200700:22
Nosxs_mfc80kor.dll8.0.50727.76249,15207-Dec-200700:22
Nosxs_mfc80u.dll8.0.50727.7621,093,12007-Dec-200700:22
Nosxs_mfcm80.dll8.0.50727.76269,63207-Dec-200700:22
Nosxs_mfcm80u.dll8.0.50727.76257,85607-Dec-200700:22
Nosxs_msvcm80.dll8.0.50727.762479,23207-Dec-200700:22
Nosxs_msvcp80.dll8.0.50727.762548,86407-Dec-200700:22
Nosxs_msvcr80.dll8.0.50727.762626,68807-Dec-200700:22
Sql90.xslNot Applicable38,02907-Dec-200700:28
Ul_atl80.dll8.0.50727.76296,25607-Dec-200700:22
Ul_mfc80.dll8.0.50727.7621,101,82407-Dec-200700:22
Ul_mfc80chs.dll8.0.50727.76240,96007-Dec-200700:22
Ul_mfc80cht.dll8.0.50727.76245,05607-Dec-200700:22
Ul_mfc80deu.dll8.0.50727.76265,53607-Dec-200700:22
Ul_mfc80enu.dll8.0.50727.76257,34407-Dec-200700:22
Ul_mfc80esp.dll8.0.50727.76261,44007-Dec-200700:22
Ul_mfc80fra.dll8.0.50727.76261,44007-Dec-200700:22
Ul_mfc80ita.dll8.0.50727.76261,44007-Dec-200700:22
Ul_mfc80jpn.dll8.0.50727.76249,15207-Dec-200700:22
Ul_mfc80kor.dll8.0.50727.76249,15207-Dec-200700:22
Ul_mfc80u.dll8.0.50727.7621,093,12007-Dec-200700:22
Ul_mfcm80.dll8.0.50727.76269,63207-Dec-200700:22
Ul_mfcm80u.dll8.0.50727.76257,85607-Dec-200700:22
Ul_msvcm80.dll8.0.50727.762479,23207-Dec-200700:22
Ul_msvcp80.dll8.0.50727.762548,86407-Dec-200700:22
Ul_msvcr80.dll8.0.50727.762626,68807-Dec-200700:22
Xlcall32.dll12.0.6300.500013,36808-Dec-200703:59
Xlsrv.dll12.0.6317.50007,727,13630-May-200820:40
Xlsrv.webservices.api.dll12.0.6300.500046,09607-Dec-200708:58
Xmlrw.dll2.0.3609.0169,84007-Dec-200700:28
Xmlrwbin.dll2.0.3609.0123,76007-Dec-200700:28

SharePoint Server 2007, 64-bit versions

Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Atl80.dll8.0.50727.762113,15207-Dec-200700:22
Ecscalcserver.dll12.0.6300.5000353,31207-Dec-200707:00
Ecsinterop.dll12.0.6300.5000224,80007-Dec-200707:00
Mfc80.dll8.0.50727.7621,656,32007-Dec-200700:22
Mfc80chs.dll8.0.50727.76233,28007-Dec-200700:22
Mfc80cht.dll8.0.50727.76233,79207-Dec-200700:22
Mfc80deu.dll8.0.50727.76254,27207-Dec-200700:22
Mfc80enu.dll8.0.50727.76247,10407-Dec-200700:22
Mfc80esp.dll8.0.50727.76251,71207-Dec-200700:22
Mfc80fra.dll8.0.50727.76252,73607-Dec-200700:22
Mfc80ita.dll8.0.50727.76252,22407-Dec-200700:22
Mfc80jpn.dll8.0.50727.76238,91207-Dec-200700:22
Mfc80kor.dll8.0.50727.76238,40007-Dec-200700:22
Mfc80u.dll8.0.50727.7621,652,73607-Dec-200700:22
Mfcm80.dll8.0.50727.76265,53607-Dec-200700:22
Mfcm80u.dll8.0.50727.76264,00007-Dec-200700:22
Msmdlocal.dll9.0.3042.015,926,64007-Dec-200700:28
Msmdlocal.dll9.0.3042.030,798,19207-Dec-200700:24
Msmgdsrv.dll9.0.3042.06,040,43207-Dec-200700:28
Msmgdsrv.dll9.0.3042.09,100,65607-Dec-200700:24
Msolap90.dll9.0.3042.04,298,09607-Dec-200700:28
Msolap90.dll9.0.3042.05,847,92007-Dec-200700:24
Msolui90.dll9.0.3042.0276,33607-Dec-200700:28
Msolui90.dll9.0.3042.0321,39207-Dec-200700:24
Msvcm80.dll8.0.50727.762516,09607-Dec-200700:22
Msvcp80.dll8.0.50727.7621,061,37607-Dec-200700:22
Msvcr80.dll8.0.50727.762796,67207-Dec-200700:22
Sql90.xslNot Applicable38,02907-Dec-200700:28
Sql90.xslNot Applicable38,02907-Dec-200700:24
Ul_atl80.dll8.0.50727.762113,15207-Dec-200700:22
Ul_mfc80.dll8.0.50727.7621,656,32007-Dec-200700:22
Ul_mfc80chs.dll8.0.50727.76233,28007-Dec-200700:22
Ul_mfc80cht.dll8.0.50727.76233,79207-Dec-200700:22
Ul_mfc80deu.dll8.0.50727.76254,27207-Dec-200700:22
Ul_mfc80enu.dll8.0.50727.76247,10407-Dec-200700:22
Ul_mfc80esp.dll8.0.50727.76251,71207-Dec-200700:22
Ul_mfc80fra.dll8.0.50727.76252,73607-Dec-200700:22
Ul_mfc80ita.dll8.0.50727.76252,22407-Dec-200700:22
Ul_mfc80jpn.dll8.0.50727.76238,91207-Dec-200700:22
Ul_mfc80kor.dll8.0.50727.76238,40007-Dec-200700:22
Ul_mfc80u.dll8.0.50727.7621,652,73607-Dec-200700:22
Ul_mfcm80.dll8.0.50727.76265,53607-Dec-200700:22
Ul_mfcm80u.dll8.0.50727.76264,00007-Dec-200700:22
Ul_msvcm80.dll8.0.50727.762516,09607-Dec-200700:22
Ul_msvcp80.dll8.0.50727.7621,061,37607-Dec-200700:22
Ul_msvcr80.dll8.0.50727.762796,67207-Dec-200700:22
Xlsrv.dll.x6412.0.6317.500014,471,20023-May-200809:34
Xlsrv.webservices.api.dll12.0.6300.500046,09607-Dec-200708:58
Xmlrw.dll2.0.3609.0169,84007-Dec-200700:28
Xmlrw.dll2.0.3609.0282,48007-Dec-200700:24
Xmlrwbin.dll2.0.3609.0123,76007-Dec-200700:28
Xmlrwbin.dll2.0.3609.0199,53607-Dec-200700:24

Excel Viewer 2007

Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Xlview.exe12.0.6324.500012,870,69617-Jul-200803:05

APPLIES TO
  • Microsoft Excel 2000 Service Pack 3
  • Microsoft Excel 2002 Service Pack 3 (SP3)
  • Microsoft Office 2003 Service Pack 2, when used with:
    • Microsoft Office Excel 2003
  • Microsoft Office 2003 Service Pack 3, when used with:
    • Microsoft Office Excel 2003
  • Microsoft Office Excel 2007, when used with:
    • Microsoft Office Professional 2007
    • Microsoft Office Standard 2007
    • Microsoft Office Ultimate 2007
  • Microsoft Office Excel Viewer 2003
  • Microsoft Office Excel Viewer 2003 Service Pack 3
  • Microsoft Office Excel Viewer 2007
  • Microsoft Office 2007 Compatibility Pack Service Pack 1
  • Microsoft Office SharePoint Server 2007
  • Microsoft Office 2004 for Mac Professional Edition
  • Microsoft Office 2004 for Mac Standard Edition
  • Microsoft Office 2004 for Mac Student and Teacher Edition
  • Microsoft Office 2008 for Mac
  • Microsoft Office 2008 for Mac Home and Student Edition
  • Microsoft Office 2008 for Mac Special Media Edition
Keywords: 
kbpubtypekc kbfix kbbug kbsecvulnerability kbsecbulletin kbsecurity kbqfe kbexpertisebeginner KB954066
 

Article Translations