Lucene search
RootSSV:19773HistoryJun 10, 2010 - 12:00 a.m.
Office Excel OBJ记录解析栈溢出漏洞（MS10-038）
2010-06-1000:00:00
Root
www.seebug.org
20
0.97 High
EPSS
Percentile
99.7%
BUGTRAQ ID: 40520
CVE ID: CVE-2010-0822
Excel是微软Office套件中的电子表格工具。
Excel在解析电子表格中的畸形OBJ（recType 0x5D）记录时存在栈溢出漏洞，用户受骗打开了畸形的Excel文档就会导致执行任意代码。
Microsoft Excel 2002 SP3
Microsoft Office 2008 for Mac
Microsoft Office 2004 for Mac
临时解决方法：
- 不要打开从不可信任来源接收到或从可信任来源意外接收到的Excel文件。
厂商补丁：
Microsoft
Microsoft已经为此发布了一个安全公告（MS10-038）以及相应补丁:
MS10-038：Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (2027452)
链接：http://www.microsoft.com/technet/security/bulletin/MS10-038.asp
Related
packetstorm
packetstorm
MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow
2011-11-23 00:00:00
Microsoft Excel Stack Overflow
2010-07-15 00:00:00
Month Of Abysssec Undisclosed Bugs - Microsoft Excel OBJ
2010-09-25 00:00:00
securityvulns
securityvulns
VUPEN Security Research - Microsoft Office Excel OBJ Stack Overflow Vulnerability (CVE-2010-0822)
2010-06-09 00:00:00
Microsoft Security Bulletin MS10-038 - Important Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (2027452)
2010-06-09 00:00:00
Microsoft Office multiple security vulnerabilities
2010-06-14 00:00:00
seebug
seebug
MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow
2014-07-01 00:00:00
Microsoft Excel 0x5D record Stack Overflow Vulnerability
2010-07-15 00:00:00
Microsoft Office Excel Malformed OBJ Record Handling Overflow(MS11-038)
2011-11-23 00:00:00
exploitpack
exploitpack
Microsoft Excel - OBJ Record Stack Overflow
2010-09-24 00:00:00
Microsoft-Excel-0x5D-record
2015-01-07 13:27:35
Microsoft Excel - 0x5D record Stack Overflow (MS10-038)
2010-07-14 00:00:00
metasploit
metasploit
MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow
2011-11-21 17:36:47
saint
saint
Microsoft Office Excel Malformed Obj Record Stack Buffer Overflow
2010-07-22 00:00:00
Microsoft Office Excel Malformed Obj Record Stack Buffer Overflow
2010-07-22 00:00:00
Microsoft Office Excel Malformed Obj Record Stack Buffer Overflow
2010-07-22 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Excel OBJ Record Stack Overflow (MS10-038) - Ver2 (CVE-2010-0822)
2014-03-31 00:00:00
Microsoft Excel OBJ Record Stack Overflow (MS10-038; CVE-2010-0822)
2010-06-08 00:00:00
cvelist
cvelist
CVE-2010-0822
2010-06-08 20:00:00
prion
prion
Stack overflow
2010-06-08 20:30:00
cve
cve
CVE-2010-0822
2010-06-08 20:30:00
exploitdb
exploitdb
Microsoft Excel - 0x5D record Stack Overflow (MS10-038)
2010-07-14 00:00:00
Microsoft Excel - OBJ Record Stack Overflow
2010-09-24 00:00:00
nessus
nessus
openvas
openvas
Microsoft Office Excel Remote Code Execution Vulnerabilities (2027452)
2010-06-09 00:00:00
Microsoft Office Excel Remote Code Execution Vulnerabilities (2027452)
2010-06-09 00:00:00