Lucene search

K
cve[email protected]CVE-2010-3238
HistoryOct 13, 2010 - 7:00 p.m.

CVE-2010-3238

2010-10-1319:00:00
CWE-20
web.nvd.nist.gov
26
microsoft excel
office 2004
mac
remote code execution
cve-2010-3238
security vulnerability

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.934 High

EPSS

Percentile

99.1%

Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka “Negative Future Function Vulnerability.”

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.934 High

EPSS

Percentile

99.1%