Lucene search
HistoryOct 13, 2010 - 7:00 p.m.
CVE-2010-3236
microsoft
excel
office
mac
remote code execution
vulnerability
cve-2010-3236
7.6 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.895 High
EPSS
Percentile
98.8%
Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka “Out Of Bounds Array Vulnerability.”
Affected configurations
Node
microsoftexcelMatch2002sp3
ORmicrosoftexcelMatch2003sp3
ORmicrosoftofficeMatch2004mac
ORmicrosoftofficeMatch2008mac
ORmicrosoftopen_xml_file_format_convertermac
Related
symantec
symantec
prion
prion
Design/Logic Flaw
2010-10-13 19:00:00
cvelist
cvelist
CVE-2010-3236
2010-10-13 18:00:00
securityvulns
securityvulns
VUPEN Security Research - Microsoft Office Excel Record Array Indexing Vulnerability (CVE-2010-3236)
2010-10-16 00:00:00
Microsoft Security Bulletin MS10-080 - Important Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2293211)
2010-10-13 00:00:00
Microsoft Office security vulnerabilities
2010-10-16 00:00:00
nvd
nvd
CVE-2010-3236
2010-10-13 19:00:45
nessus
nessus
openvas
openvas
Microsoft Office Excel Remote Code Execution Vulnerabilities (2293211)
2010-10-13 00:00:00
Microsoft Office Excel Remote Code Execution Vulnerabilities (2293211)
2010-10-13 00:00:00
7.6 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.895 High
EPSS
Percentile
98.8%
Related for CVE-2010-3236