This script is Copyright (C) 2011-2014 Tenable Network Security, Inc.
Arbitrary code can be executed on the remote host through Microsoft
The remote Windows host is running a version of Microsoft Office,
Excel, or a related product that is affected by several
If an attacker can trick a user on the affected host into opening a
specially crafted Excel file, he could leverage this issue to execute
arbitrary code subject to the user's privileges.
See also :
Microsoft has released a set of patches for Office 2003, 2007, 2010,
Excel Viewer, Office Compatability Pack, Excel Services, and Excel Web
Risk factor :
High / CVSS Base Score : 9.3
CVSS Temporal Score : 7.3
Public Exploit Available : true