CVE-2010-0264

Microsoft Excel - Remote Code Execution via Crafted Spreadsheet

Title source: llm
STIX 2.1

Description

Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability."

References (4)

Core 4
Core References
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA10-068A.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1023698
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7888

Scores

EPSS 0.2122
EPSS Percentile 97.3%

Details

CWE
CWE-94
Status published
Products (9)
microsoft/excel 2002 sp3
microsoft/excel 2003 sp3
microsoft/excel 2007 sp1 (2 CPE variants)
microsoft/office 2004
microsoft/office 2008
microsoft/office_compatibility_pack 2007 sp1 (2 CPE variants)
microsoft/office_excel_viewer (2 CPE variants)
microsoft/office_sharepoint_server 2007 sp1 (4 CPE variants)
microsoft/open_xml_file_format_converter
Published Mar 10, 2010
Tracked Since Feb 18, 2026