Microsoft Excel - WOPT Record Parsing Heap Memory Corruption

🗓️ 21 Sep 2010 00:00:00Reported by AbysssecType

Microsoft Excel WOPT Record Parsing Heap Memory Corruption, Excel 2002 SP3, High Impact, CVE-2010-124

Reporter	Title	Published	Views	Family All 21
Circl	CVE-2010-1248	16 Sep 201000:00	–	circl
Check Point Advisories	Microsoft Excel HFPicture Record Stack Overflow (MS10-038; CVE-2010-1248)	8 Jun 201000:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Excel HFPicture Record Stack Overflow (MS10-038) - Ver2 (CVE-2010-1248)	31 Mar 201400:00	–	checkpoint_advisories
CVE	CVE-2010-1248	8 Jun 201020:00	–	cve
Cvelist	CVE-2010-1248	8 Jun 201020:00	–	cvelist
Exploit DB	Microsoft Excel - HFPicture Record Parsing Remote Code Execution	16 Sep 201000:00	–	exploitdb
exploitpack	Microsoft Excel - HFPicture Record Parsing Remote Code Execution	16 Sep 201000:00	–	exploitpack
exploitpack	Microsoft Excel - WOPT Record Parsing Heap Memory Corruption	21 Sep 201000:00	–	exploitpack
Tenable Nessus	MS10-038: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2027452) (Mac OS X)	20 Oct 201000:00	–	nessus
Tenable Nessus	MS10-038: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (2027452)	9 Jun 201000:00	–	nessus

'''
  __  __  ____         _    _ ____ 
 |  \/  |/ __ \   /\  | |  | |  _ \
 | \  / | |  | | /  \ | |  | | |_) |
 | |\/| | |  | |/ /\ \| |  | |  _ <  (day 21 binary analysis)
 | |  | | |__| / ____ \ |__| | |_) |
 |_|  |_|\____/_/    \_\____/|____/
 
'''
 
  Title               :  Microsoft Excel WOPT Record Parsing Heap Memory Corruption
  Version             :  Excel 2002 SP3
  Analysis            :  http://www.abysssec.com
  Vendor              :  http://www.microsoft.com
  Impact              :  High
  Contact             :  shahin [at] abysssec.com , info  [at] abysssec.com
  Twitter             :  @abysssec
  CVE                 :  CVE-2010-1248
 
here is BA : http://www.exploit-db.com/moaub-21-microsoft-excel-wopt-record-parsing-heap-memory-corruption/
here is the PoC : https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/15065.rar (moaub-21-exploit.rar)

21 Sep 2010 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 29.3

EPSS0.6225