CVE-2010-0264

EUVD-2010-0295
Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability."
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 98%
Affected Products (NVD)
VendorProductVersion
microsoftoffice_excel_viewer
*
microsoftoffice_excel_viewer
*
microsoftopen_xml_file_format_converter
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securitytracker.com/id?1023698
http://www.us-cert.gov/cas/techalerts/TA10-068A.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7888
http://www.securitytracker.com/id?1023698
http://www.us-cert.gov/cas/techalerts/TA10-068A.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7888