CVE-2010-0261 Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arb...
HighCVSS 9.3
EPSS 23.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet in which "a MDXSET record is broken up into several records," aka "Microsoft Office Excel MDXSET Record Heap Overflow Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft excel | = 2002-sp3 | No fix listed |
| Microsoft excel | = 2003-sp3 | No fix listed |
| Microsoft excel | = 2007-sp1 | No fix listed |
| Microsoft excel | = 2007-sp2 | No fix listed |
| Microsoft office | = 2004 | No fix listed |
| Microsoft office | = 2008 | No fix listed |
| Microsoft office compatibility pack | = 2007-sp1 | No fix listed |
| Microsoft office compatibility pack | = 2007-sp2 | No fix listed |
| Microsoft office excel viewer | All versions | No fix listed |
| Microsoft office sharepoint server | = 2007-sp1 | No fix listed |
| Microsoft office sharepoint server | = 2007-sp2 | No fix listed |
| Microsoft open xml file format converter | All versions | No fix listed |
References
- 20100309 Microsoft Excel MDXSET Record Heap Overflow Vulnerability third-party-advisory
- 1023698 vdb-entry
- TA10-068A third-party-advisory us-government-resource
- MS10-017 vendor-advisory
- oval:org.mitre.oval:def:8479 signature vdb-entry