CVE-2010-0261
Microsoft Excel 2007 SP1-SP2 - Remote Code Execution via Crafted MDXSET Record
Title source: llmDescription
Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet in which "a MDXSET record is broken up into several records," aka "Microsoft Office Excel MDXSET Record Heap Overflow Vulnerability."
References (5)
Core 5
Core References
Third Party Advisory third-party-advisory
x_refsource_idefense
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=861
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8479
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017
US Government Resource third-party-advisory
x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA10-068A.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1023698
Scores
EPSS
0.2309
EPSS Percentile
97.5%
Details
CWE
CWE-119
Status
published
Products (9)
microsoft/excel
2002 sp3
microsoft/excel
2003 sp3
microsoft/excel
2007 sp1 (2 CPE variants)
microsoft/office
2004
microsoft/office
2008
microsoft/office_compatibility_pack
2007 sp1 (2 CPE variants)
microsoft/office_excel_viewer
(2 CPE variants)
microsoft/office_sharepoint_server
2007 sp1 (4 CPE variants)
microsoft/open_xml_file_format_converter
Published
Mar 10, 2010
Tracked Since
Feb 18, 2026