CVE-2012-0185

Microsoft Excel 2007 SP2-SP3 and 2010 Gold-SP1 - Remote Code Execution via MergeCells Record Heap Overflow

Title source: llm
STIX 2.1

Description

Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening, aka "Excel MergeCells Record Heap Overflow Vulnerability."

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1027041
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14738
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/75118
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/49112
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA12-129A.html

Scores

EPSS 0.2463
EPSS Percentile 97.7%

Details

CWE
CWE-264
Status published
Products (4)
microsoft/excel 2007 sp2 (2 CPE variants)
microsoft/excel 2010 (2 CPE variants)
microsoft/excel_viewer
microsoft/office_compatibility_pack (2 CPE variants)
Published May 09, 2012
Tracked Since Feb 18, 2026