Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

MS08-057: Vulnerabilities in Microsoft Excel could allow remote code execution


View products that this article applies to.

Introduction

Microsoft has released security bulletin MS08-057. To view the complete security bulletin, visit one of the following Microsoft Web sites.

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

↑ Back to the top


More information about this security update

For more information about this security update and for information about any known issues with specific releases of this software, click the following article numbers to view the articles in the Microsoft Knowledge Base:
955461 MS08-057: Description of the security update for Excel 2000: October 14, 2008
955464 MS08-057: Description of the security update for Excel 2002: October 14, 2008
955466 MS08-057: Description of the security update for Excel 2003: October 14, 2008
955468 MS08-057: Description of the security update for Excel Viewer 2003: October 14, 2008
955470 MS08-057: Description of the security update for Excel 2007: October 14, 2008
955935 MS08-057: Description of the security update for Excel Viewer: October 14, 2008
955936 MS08-057: Description of the security update for 2007 Microsoft Office system and the Microsoft Office Compatibility Pack: October 14, 2008
955937 MS08-057: Description of the security update for Excel Services in Microsoft Office SharePoint Server 2007: October 14, 2008
958267 Description of the Microsoft Office 2008 for Mac 12.1.3 Update
958304 Description of the Open XML File Format Converter for Mac 1.0.1 Update
958312 Description of the Microsoft Office 2004 for Mac 11.5.2 Update

File Information

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

For all supported editions of Excel 2000

File nameFile versionFile sizeDateTimePlatform
Excel.exe9.0.0.89727,237,67701-Aug-200823:39x86

For all supported editions of Excel 2002

File nameFile versionFile sizeDateTimePlatform
Excel.exe10.0.6847.09,364,48019-Aug-200813:15x86
Excel.exe_103310.0.6847.09,364,48019-Aug-200813:16Not Applicable
Excel.exe_104910.0.6847.09,364,48019-Aug-200813:16Not Applicable

For all supported editions of Excel 2003

File nameFile versionFile sizeDateTimePlatform
Excel.exe11.0.8231.010,354,17604-Aug-200820:12x86

For all supported editions of Excel Viewer 2003

File nameFile versionFile sizeDateTimePlatform
Xlview.exe11.0.8231.05,276,67204-Aug-200820:12x86

For all supported editions of Excel 2007

File nameFile versionFile sizeDateTimePlatform
Excel.exe12.0.6324.500117,930,26430-Jul-200807:25x86
Excel.manNot Applicable79126-Jul-200820:51Not Applicable
Excel.pipNot Applicable1,65607-Dec-200723:26Not Applicable
Xlcall32.dll12.0.6300.500013,36808-Dec-200700:59x86

For all supported editions of Excel Viewer

File nameFile versionFile sizeDateTimePlatform
Xlview.exe12.0.6325.500012,870,69625-Jul-200800:11x86
Xlvprtid.xmlNot Applicable79,68422-Oct-200723:57Not Applicable

For all supported editions of Office Compatibility Pack

File nameFile versionFile sizeDateTimePlatform
Excelcnv.exe12.0.6324.500114,714,39230-Jul-200807:09x86

For Excel Services in Microsoft Office SharePoint Server 2007, 32-bit Edition

File nameFile versionFile sizeDateTime
Ansi_atl80.97f81af1_0e47_dc99_ff1f_c8b3b9a1e18e8.0.50727.762114,68807-Dec-200700:22
Atl80.dll8.0.50727.76296,25607-Dec-200700:22
Catalog.8.0.50727.762.63e949f6_03bc_5c40_ff1f_c8b3b9a1e18eNot Applicable8,35507-Dec-200700:22
Catalog.8.0.50727.762.66332652_9c28_58b1_ff1f_c8b3b9a1e18eNot Applicable8,35507-Dec-200700:22
Catalog.8.0.50727.762.68b7c6d9_1df2_54c1_ff1f_c8b3b9a1e18eNot Applicable8,35507-Dec-200700:22
Catalog.8.0.50727.762.74fd3ce6_2a8d_0e9c_ff1f_c8b3b9a1e18eNot Applicable8,34807-Dec-200700:22
Catalog.8.0.50727.762.97f81af1_0e47_dc99_ff1f_c8b3b9a1e18eNot Applicable8,33507-Dec-200700:22
Catalog.8.0.50727.762.98cb24ad_52fb_db5f_ff1f_c8b3b9a1e18eNot Applicable8,33507-Dec-200700:22
Catalog.8.0.50727.762.9bae13a2_e7af_d6c3_ff1f_c8b3b9a1e18eNot Applicable8,33507-Dec-200700:22
Catalog.8.0.50727.762.d2730d3f_3c41_5884_ff1f_c8b3b9a1e18eNot Applicable8,36107-Dec-200700:22
Ecscalcserver.dll12.0.6323.5000357,40803-Jul-200801:05
Ecsinterop.dll12.0.6300.5000151,07207-Dec-200708:02
Manifest.8.0.50727.762.63e949f6_03bc_5c40_ff1f_c8b3b9a1e18eNot Applicable80007-Dec-200700:22
Manifest.8.0.50727.762.66332652_9c28_58b1_ff1f_c8b3b9a1e18eNot Applicable80007-Dec-200700:22
Manifest.8.0.50727.762.68b7c6d9_1df2_54c1_ff1f_c8b3b9a1e18eNot Applicable80007-Dec-200700:22
Manifest.8.0.50727.762.74fd3ce6_2a8d_0e9c_ff1f_c8b3b9a1e18eNot Applicable1,23907-Dec-200700:22
Manifest.8.0.50727.762.97f81af1_0e47_dc99_ff1f_c8b3b9a1e18eNot Applicable46507-Dec-200700:22
Manifest.8.0.50727.762.98cb24ad_52fb_db5f_ff1f_c8b3b9a1e18eNot Applicable1,86907-Dec-200700:22
Manifest.8.0.50727.762.9bae13a2_e7af_d6c3_ff1f_c8b3b9a1e18eNot Applicable2,37107-Dec-200700:22
Manifest.8.0.50727.762.d2730d3f_3c41_5884_ff1f_c8b3b9a1e18eNot Applicable80607-Dec-200700:22
Mfc80.dll8.0.50727.7621,101,82407-Dec-200700:22
Mfc80chs.dll8.0.50727.76240,96007-Dec-200700:22
Mfc80cht.dll8.0.50727.76245,05607-Dec-200700:22
Mfc80deu.dll8.0.50727.76265,53607-Dec-200700:22
Mfc80enu.dll8.0.50727.76257,34407-Dec-200700:22
Mfc80esp.dll8.0.50727.76261,44007-Dec-200700:22
Mfc80fra.dll8.0.50727.76261,44007-Dec-200700:22
Mfc80ita.dll8.0.50727.76261,44007-Dec-200700:22
Mfc80jpn.dll8.0.50727.76249,15207-Dec-200700:22
Mfc80kor.dll8.0.50727.76249,15207-Dec-200700:22
Mfc80u.dll8.0.50727.7621,093,12007-Dec-200700:22
Mfcm80.dll8.0.50727.76269,63207-Dec-200700:22
Mfcm80u.dll8.0.50727.76257,85607-Dec-200700:22
Msmdlocal.dll9.0.3042.015,926,64007-Dec-200700:28
Msmgdsrv.dll9.0.3042.06,040,43207-Dec-200700:28
Msolap90.dll9.0.3042.04,298,09607-Dec-200700:28
Msolui90.dll9.0.3042.0276,33607-Dec-200700:28
Msvcm80.dll8.0.50727.762479,23207-Dec-200700:22
Msvcp80.dll8.0.50727.762548,86407-Dec-200700:22
Msvcr80.dll8.0.50727.762626,68807-Dec-200700:22
Nosxs_atl80.dll8.0.50727.76296,25607-Dec-200700:22
Nosxs_mfc80.dll8.0.50727.7621,101,82407-Dec-200700:22
Nosxs_mfc80chs.dll8.0.50727.76240,96007-Dec-200700:22
Nosxs_mfc80cht.dll8.0.50727.76245,05607-Dec-200700:22
Nosxs_mfc80deu.dll8.0.50727.76265,53607-Dec-200700:22
Nosxs_mfc80enu.dll8.0.50727.76257,34407-Dec-200700:22
Nosxs_mfc80esp.dll8.0.50727.76261,44007-Dec-200700:22
Nosxs_mfc80fra.dll8.0.50727.76261,44007-Dec-200700:22
Nosxs_mfc80ita.dll8.0.50727.76261,44007-Dec-200700:22
Nosxs_mfc80jpn.dll8.0.50727.76249,15207-Dec-200700:22
Nosxs_mfc80kor.dll8.0.50727.76249,15207-Dec-200700:22
Nosxs_mfc80u.dll8.0.50727.7621,093,12007-Dec-200700:22
Nosxs_mfcm80.dll8.0.50727.76269,63207-Dec-200700:22
Nosxs_mfcm80u.dll8.0.50727.76257,85607-Dec-200700:22
Nosxs_msvcm80.dll8.0.50727.762479,23207-Dec-200700:22
Nosxs_msvcp80.dll8.0.50727.762548,86407-Dec-200700:22
Nosxs_msvcr80.dll8.0.50727.762626,68807-Dec-200700:22
Sql90.xslNot Applicable38,02907-Dec-200700:28
Ul_atl80.dll8.0.50727.76296,25607-Dec-200700:22
Ul_catalog.63e949f6_03bc_5c40_ff1f_c8b3b9a1e18eNot Applicable8,35507-Dec-200700:22
Ul_catalog.66332652_9c28_58b1_ff1f_c8b3b9a1e18eNot Applicable8,35507-Dec-200700:22
Ul_catalog.68b7c6d9_1df2_54c1_ff1f_c8b3b9a1e18eNot Applicable8,35507-Dec-200700:22
Ul_catalog.74fd3ce6_2a8d_0e9c_ff1f_c8b3b9a1e18eNot Applicable8,34807-Dec-200700:22
Ul_catalog.97f81af1_0e47_dc99_ff1f_c8b3b9a1e18eNot Applicable8,33507-Dec-200700:22
Ul_catalog.98cb24ad_52fb_db5f_ff1f_c8b3b9a1e18eNot Applicable8,33507-Dec-200700:22
Ul_catalog.9bae13a2_e7af_d6c3_ff1f_c8b3b9a1e18eNot Applicable8,33507-Dec-200700:22
Ul_catalog.d2730d3f_3c41_5884_ff1f_c8b3b9a1e18eNot Applicable8,36107-Dec-200700:22
Ul_manifest.63e949f6_03bc_5c40_ff1f_c8b3b9a1e18eNot Applicable80007-Dec-200700:22
Ul_manifest.66332652_9c28_58b1_ff1f_c8b3b9a1e18eNot Applicable80007-Dec-200700:22
Ul_manifest.68b7c6d9_1df2_54c1_ff1f_c8b3b9a1e18eNot Applicable80007-Dec-200700:22
Ul_manifest.74fd3ce6_2a8d_0e9c_ff1f_c8b3b9a1e18eNot Applicable1,23907-Dec-200700:22
Ul_manifest.97f81af1_0e47_dc99_ff1f_c8b3b9a1e18eNot Applicable46507-Dec-200700:22
Ul_manifest.98cb24ad_52fb_db5f_ff1f_c8b3b9a1e18eNot Applicable1,86907-Dec-200700:22
Ul_manifest.9bae13a2_e7af_d6c3_ff1f_c8b3b9a1e18eNot Applicable2,37107-Dec-200700:22
Ul_manifest.d2730d3f_3c41_5884_ff1f_c8b3b9a1e18eNot Applicable80607-Dec-200700:22
Ul_mfc80.dll8.0.50727.7621,101,82407-Dec-200700:22
Ul_mfc80chs.dll8.0.50727.76240,96007-Dec-200700:22
Ul_mfc80cht.dll8.0.50727.76245,05607-Dec-200700:22
Ul_mfc80deu.dll8.0.50727.76265,53607-Dec-200700:22
Ul_mfc80enu.dll8.0.50727.76257,34407-Dec-200700:22
Ul_mfc80esp.dll8.0.50727.76261,44007-Dec-200700:22
Ul_mfc80fra.dll8.0.50727.76261,44007-Dec-200700:22
Ul_mfc80ita.dll8.0.50727.76261,44007-Dec-200700:22
Ul_mfc80jpn.dll8.0.50727.76249,15207-Dec-200700:22
Ul_mfc80kor.dll8.0.50727.76249,15207-Dec-200700:22
Ul_mfc80u.dll8.0.50727.7621,093,12007-Dec-200700:22
Ul_mfcm80.dll8.0.50727.76269,63207-Dec-200700:22
Ul_mfcm80u.dll8.0.50727.76257,85607-Dec-200700:22
Ul_msvcm80.dll8.0.50727.762479,23207-Dec-200700:22
Ul_msvcp80.dll8.0.50727.762548,86407-Dec-200700:22
Ul_msvcr80.dll8.0.50727.762626,68807-Dec-200700:22
Xlcall32.dll12.0.6300.500013,36808-Dec-200703:59
Xlsrv.dll12.0.6324.50017,727,13630-Jul-200810:10
Xlsrv.webservices.api.dll12.0.6300.500046,09607-Dec-200708:58
Xmlrw.dll2.0.3609.0169,84007-Dec-200700:28
Xmlrwbin.dll2.0.3609.0123,76007-Dec-200700:28

For Excel Services in Microsoft Office SharePoint Server 2007, 64-bit Edition

File nameFile versionFile sizeDateTime
Atl80.dll8.0.50727.762113,15207-Dec-200700:22
Catalog.8.0.50727.762.4f6d20f0_cce5_1492_ff1f_c8b3b9a1e18eNot Applicable8,35507-Dec-200700:22
Catalog.8.0.50727.762.51b6fd4c_6551_1104_ff1f_c8b3b9a1e18eNot Applicable8,35507-Dec-200700:22
Catalog.8.0.50727.762.543b9dd3_e71b_0d13_ff1f_c8b3b9a1e18eNot Applicable8,35507-Dec-200700:22
Catalog.8.0.50727.762.608113e0_f3b6_c6ee_ff1f_c8b3b9a1e18eNot Applicable8,34807-Dec-200700:22
Catalog.8.0.50727.762.837bf1eb_d770_94eb_ff1f_c8b3b9a1e18eNot Applicable8,33507-Dec-200700:22
Catalog.8.0.50727.762.844efba7_1c24_93b2_ff1f_c8b3b9a1e18eNot Applicable8,33507-Dec-200700:22
Catalog.8.0.50727.762.8731ea9c_b0d8_8f16_ff1f_c8b3b9a1e18eNot Applicable8,33507-Dec-200700:22
Catalog.8.0.50727.762.bdf6e439_056a_10d7_ff1f_c8b3b9a1e18eNot Applicable8,36107-Dec-200700:22
Ecscalcserver.dll12.0.6323.5000357,40803-Jul-200801:06
Ecsinterop.dll12.0.6300.5000224,80007-Dec-200707:00
Manifest.8.0.50727.762.4f6d20f0_cce5_1492_ff1f_c8b3b9a1e18eNot Applicable80407-Dec-200700:22
Manifest.8.0.50727.762.51b6fd4c_6551_1104_ff1f_c8b3b9a1e18eNot Applicable80407-Dec-200700:22
Manifest.8.0.50727.762.543b9dd3_e71b_0d13_ff1f_c8b3b9a1e18eNot Applicable80407-Dec-200700:22
Manifest.8.0.50727.762.608113e0_f3b6_c6ee_ff1f_c8b3b9a1e18eNot Applicable1,24107-Dec-200700:22
Manifest.8.0.50727.762.837bf1eb_d770_94eb_ff1f_c8b3b9a1e18eNot Applicable46707-Dec-200700:22
Manifest.8.0.50727.762.844efba7_1c24_93b2_ff1f_c8b3b9a1e18eNot Applicable1,87107-Dec-200700:22
Manifest.8.0.50727.762.8731ea9c_b0d8_8f16_ff1f_c8b3b9a1e18eNot Applicable2,37307-Dec-200700:22
Manifest.8.0.50727.762.bdf6e439_056a_10d7_ff1f_c8b3b9a1e18eNot Applicable81007-Dec-200700:22
Mfc80.dll8.0.50727.7621,656,32007-Dec-200700:22
Mfc80chs.dll8.0.50727.76233,28007-Dec-200700:22
Mfc80cht.dll8.0.50727.76233,79207-Dec-200700:22
Mfc80deu.dll8.0.50727.76254,27207-Dec-200700:22
Mfc80enu.dll8.0.50727.76247,10407-Dec-200700:22
Mfc80esp.dll8.0.50727.76251,71207-Dec-200700:22
Mfc80fra.dll8.0.50727.76252,73607-Dec-200700:22
Mfc80ita.dll8.0.50727.76252,22407-Dec-200700:22
Mfc80jpn.dll8.0.50727.76238,91207-Dec-200700:22
Mfc80kor.dll8.0.50727.76238,40007-Dec-200700:22
Mfc80u.dll8.0.50727.7621,652,73607-Dec-200700:22
Mfcm80.dll8.0.50727.76265,53607-Dec-200700:22
Mfcm80u.dll8.0.50727.76264,00007-Dec-200700:22
Msmdlocal.dll9.0.3042.015,926,64007-Dec-200700:28
Msmdlocal.dll9.0.3042.030,798,19207-Dec-200700:24
Msmgdsrv.dll9.0.3042.06,040,43207-Dec-200700:28
Msmgdsrv.dll9.0.3042.09,100,65607-Dec-200700:24
Msolap90.dll9.0.3042.04,298,09607-Dec-200700:28
Msolap90.dll9.0.3042.05,847,92007-Dec-200700:24
Msolui90.dll9.0.3042.0276,33607-Dec-200700:28
Msolui90.dll9.0.3042.0321,39207-Dec-200700:24
Msvcm80.dll8.0.50727.762516,09607-Dec-200700:22
Msvcp80.dll8.0.50727.7621,061,37607-Dec-200700:22
Msvcr80.dll8.0.50727.762796,67207-Dec-200700:22
Sql90.xslNot Applicable38,02907-Dec-200700:28
Sql90.xslNot Applicable38,02907-Dec-200700:24
Ul_atl80.dll8.0.50727.762113,15207-Dec-200700:22
Ul_catalog.4f6d20f0_cce5_1492_ff1f_c8b3b9a1e18eNot Applicable8,35507-Dec-200700:22
Ul_catalog.51b6fd4c_6551_1104_ff1f_c8b3b9a1e18eNot Applicable8,35507-Dec-200700:22
Ul_catalog.543b9dd3_e71b_0d13_ff1f_c8b3b9a1e18eNot Applicable8,35507-Dec-200700:22
Ul_catalog.608113e0_f3b6_c6ee_ff1f_c8b3b9a1e18eNot Applicable8,34807-Dec-200700:22
Ul_catalog.837bf1eb_d770_94eb_ff1f_c8b3b9a1e18eNot Applicable8,33507-Dec-200700:22
Ul_catalog.844efba7_1c24_93b2_ff1f_c8b3b9a1e18eNot Applicable8,33507-Dec-200700:22
Ul_catalog.8731ea9c_b0d8_8f16_ff1f_c8b3b9a1e18eNot Applicable8,33507-Dec-200700:22
Ul_catalog.bdf6e439_056a_10d7_ff1f_c8b3b9a1e18eNot Applicable8,36107-Dec-200700:22
Ul_manifest.4f6d20f0_cce5_1492_ff1f_c8b3b9a1e18eNot Applicable80407-Dec-200700:22
Ul_manifest.51b6fd4c_6551_1104_ff1f_c8b3b9a1e18eNot Applicable80407-Dec-200700:22
Ul_manifest.543b9dd3_e71b_0d13_ff1f_c8b3b9a1e18eNot Applicable80407-Dec-200700:22
Ul_manifest.608113e0_f3b6_c6ee_ff1f_c8b3b9a1e18eNot Applicable1,24107-Dec-200700:22
Ul_manifest.837bf1eb_d770_94eb_ff1f_c8b3b9a1e18eNot Applicable46707-Dec-200700:22
Ul_manifest.844efba7_1c24_93b2_ff1f_c8b3b9a1e18eNot Applicable1,87107-Dec-200700:22
Ul_manifest.8731ea9c_b0d8_8f16_ff1f_c8b3b9a1e18eNot Applicable2,37307-Dec-200700:22
Ul_manifest.bdf6e439_056a_10d7_ff1f_c8b3b9a1e18eNot Applicable81007-Dec-200700:22
Ul_mfc80.dll8.0.50727.7621,656,32007-Dec-200700:22
Ul_mfc80chs.dll8.0.50727.76233,28007-Dec-200700:22
Ul_mfc80cht.dll8.0.50727.76233,79207-Dec-200700:22
Ul_mfc80deu.dll8.0.50727.76254,27207-Dec-200700:22
Ul_mfc80enu.dll8.0.50727.76247,10407-Dec-200700:22
Ul_mfc80esp.dll8.0.50727.76251,71207-Dec-200700:22
Ul_mfc80fra.dll8.0.50727.76252,73607-Dec-200700:22
Ul_mfc80ita.dll8.0.50727.76252,22407-Dec-200700:22
Ul_mfc80jpn.dll8.0.50727.76238,91207-Dec-200700:22
Ul_mfc80kor.dll8.0.50727.76238,40007-Dec-200700:22
Ul_mfc80u.dll8.0.50727.7621,652,73607-Dec-200700:22
Ul_mfcm80.dll8.0.50727.76265,53607-Dec-200700:22
Ul_mfcm80u.dll8.0.50727.76264,00007-Dec-200700:22
Ul_msvcm80.dll8.0.50727.762516,09607-Dec-200700:22
Ul_msvcp80.dll8.0.50727.7621,061,37607-Dec-200700:22
Ul_msvcr80.dll8.0.50727.762796,67207-Dec-200700:22
Xlsrv.dll12.0.6324.500114,472,22426-Jul-200823:48
Xlsrv.webservices.api.dll12.0.6300.500046,09607-Dec-200708:58
Xmlrw.dll2.0.3609.0169,84007-Dec-200700:28
Xmlrw.dll2.0.3609.0282,48007-Dec-200700:24
Xmlrwbin.dll2.0.3609.0123,76007-Dec-200700:28
Xmlrwbin.dll2.0.3609.0199,53607-Dec-200700:24

↑ Back to the top


Keywords: KB956416, kbexpertisebeginner, kbqfe, kbsecurity, kbsecbulletin, kbsecvulnerability, kbbug, kbfix, kbarchive, kbnosurvey

↑ Back to the top

Article Info
Article ID : 956416
Revision : 4
Created on : 1/16/2015
Published on : 1/16/2015
Exists online : False
Views : 305