4 matches found
Microsoft Office Excel Record Parsing Integer Overflow - Ver2 (CVE-2010-3230)
A integer overflow vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an integer overflow parsing in an Excel file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Excel记录解析符号扩展整数溢出漏洞(MS10-080)
BUGTRAQ ID: 43643 CVE ID: CVE-2010-3230 Excel是微软Office套件中的电子表格工具。 Excel在处理文档中某些记录类型时存在最终可导致堆溢出的整数溢出漏洞,用户受骗打开了畸形的.XSL文档就可能导致执行任意代码。 Microsoft Excel 2002 SP3 临时解决方法: 不要打开从不可信任来源接收到或从可信任来源意外接收到的Microsoft Office文件。 厂商补丁: Microsoft --------- Microsoft已经为此发布了一个安全公告(MS10-080)以及相应补丁:...
CVE-2010-3230
The CVE-2010-3230 entry relates to an integer overflow in Microsoft Excel 2002 SP3 while parsing crafted record information, enabling remote code execution via a specially crafted Excel file. Affected software in the linked advisories includes Excel 2002 SP3 and related Excel formats across Offic...
Secunia Research: Microsoft Excel Record Parsing Integer Overflow Vulnerability
====================================================================== Secunia Research 12/10/2010 - Microsoft Excel Record Parsing Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...