Lucene search

K
cve[email protected]CVE-2010-0264
HistoryMar 10, 2010 - 10:30 p.m.

CVE-2010-0264

2010-03-1022:30:01
CWE-94
web.nvd.nist.gov
31
cve-2010-0264
microsoft office
excel
remote code execution
vulnerability

7.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.887 High

EPSS

Percentile

98.7%

Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka β€œMicrosoft Office Excel DbOrParamQry Record Parsing Vulnerability.”

Affected configurations

NVD
Node
microsoftexcelMatch2002sp3
OR
microsoftexcelMatch2003sp3
OR
microsoftexcelMatch2007sp1
OR
microsoftexcelMatch2007sp2
OR
microsoftofficeMatch2004mac
OR
microsoftofficeMatch2008mac
OR
microsoftoffice_compatibility_packMatch2007sp1
OR
microsoftoffice_compatibility_packMatch2007sp2
OR
microsoftoffice_excel_viewersp1
OR
microsoftoffice_excel_viewersp2
OR
microsoftoffice_sharepoint_serverMatch2007sp1x32
OR
microsoftoffice_sharepoint_serverMatch2007sp1x64
OR
microsoftoffice_sharepoint_serverMatch2007sp2x32
OR
microsoftoffice_sharepoint_serverMatch2007sp2x64
OR
microsoftopen_xml_file_format_convertermac

7.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.887 High

EPSS

Percentile

98.7%