CVE-2010-1249

EPSS 64.89%
Published 08.06.2010 20:30:02
Last modified 11.04.2025 00:51:21
Source secure@microsoft.com
Teams watchlist Login
Open Login

Buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed ExternName (0x23) record, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1247.

Affected products Warnungen 0 Metrics 2 CWE 1 References 9

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Excel Version2002 Updatesp3

Microsoft ≫ Office Version2004 Editionmac

Microsoft ≫ Office Version2008 Editionmac

Microsoft ≫ Open Xml File Format Converter Editionmac

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	64.89%	0.983

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://www.us-cert.gov/cas/techalerts/TA10-159B.html

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038

http://osvdb.org/65232

http://www.securityfocus.com/archive/1/511767/100/0/threaded

http://www.securityfocus.com/bid/40527

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6634

https://nvd.nist.gov/vuln/detail/CVE-2010-1249

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-1249

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-1249

EUVD