Jun 30 CVE-2009-3129 XLS Mission to China Permanent Contact info

CVE-2009-3129 Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset, aka "Excel Featheader Record Memory Corruption Vulnerability." 

 Download   15a22ac5b7ed9fd640d6220dac0b4488 Permanent Contact info.xls as a password protected archive (contact me if you need the password)

From: Gary Crowley [mailto:gcgarycrowley@yahoo.com]
Sent: Wednesday, June 30, 2010 8:56 PM
To: gcgarycrowley@yahoo.com
Subject: Fw: U.S. Mission to China Permanent Contact info




Dear all

Attached is U.S. Mission to China Permanent Contact.

Result: 8/42 (19.05%)
http://www.virustotal.com/analisis/68809148ea164e7e9c605e51740e229160540c301c1148d5a9732cd62a43022c-1280205402
Antivirus     Version     Last Update     Result
AntiVir    8.2.4.26    2010.07.26    EXP/Excel.CVE-2009-3129
Authentium    5.2.0.5    2010.07.27    MSExcel/Dropper.B!Camelot
Emsisoft    5.0.0.34    2010.07.27    Exploit.Win32.CVE-2009!IK
Ikarus    T3.1.1.84.0    2010.07.27    Exploit.Win32.CVE-2009
Microsoft    1.6004    2010.07.26    Exploit:Win32/CVE-2009-3129

Norman    6.05.11    2010.07.26    ShellCode.M
TrendMicro    9.120.0.1004    2010.07.27    TROJ_DROPPER.QRX
TrendMicro-HouseCall    9.120.0.1004    2010.07.27    TROJ_DROPPER.QRX
Additional information
File size: 56714 bytes
MD5...: 15a22ac5b7ed9fd640d6220dac0b4488

Headers

Received: from [180.150.229.29] by web120112.mail.ne1.yahoo.com via HTTP; Wed, 30 Jun 2010 17:56:09 PDT
X-Mailer: YahooMailClassic/11.1.4 YahooMailWebService/0.8.104.274457
Date: Wed, 30 Jun 2010 17:56:09 -0700
From: Gary Crowley
Subject: Fw: U.S. Mission to China Permanent Contact info
To: gcgarycrowley@yahoo.com
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="0-415109960-1277945769=:30240"

netnum:     180.150.224.0 - 180.150.231.255
netname:    EHOSTIDC
country:    KR
admin-c:    JK1606-AP
tech-c:    JK1606-AP
status:    Allocated Portable
remarks:    www.ehostidc.co.kr
mnt-by:    MNT-KRNIC-AP
mnt-lower:    MNT-KRNIC-AP
changed:    XXXXXXXXXX@apnic.net 20090909
source:    APNIC
person:    Jinyoung Lee
nic-hdl:    JK1606-AP
e-mail:    XXXXXXX@ehostidc.co.kr
address:    Newticastle Geumcheon-gu Gasan-dong Seoul
phone:    +82-2-6277-3316
fax-no:    +82-2-6277-3311
country:    KR
changed:    XXXXXXXXXX@nida.or.kr 20090512
mnt-by:    MNT-KRNIC-AP
source:    APNIC
inetnum:    180.150.224.0 - 180.150.231.255
netname:    EHOSTIDC-KR