9.3

CVE-2012-0185

EPSS 64.69%
Published 09.05.2012 00:55:01
Last modified 11.04.2025 00:51:21
Source secure@microsoft.com
Teams watchlist Login
Open Login

Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening, aka "Excel MergeCells Record Heap Overflow Vulnerability."

Affected products Warnungen 0 Metrics 2 CWE 0 References 9

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Excel Version2007 Updatesp2

Microsoft ≫ Excel Version2007 Updatesp3

Microsoft ≫ Excel Version2010

Microsoft ≫ Excel Version2010 Updatesp1

Microsoft ≫ Excel Viewer

Microsoft ≫ Office Compatibility Pack Updatesp2

Microsoft ≫ Office Compatibility Pack Updatesp3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	64.69%	0.983

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://www.us-cert.gov/cas/techalerts/TA12-129A.html

US Government Resource

http://secunia.com/advisories/49112

http://www.securitytracker.com/id?1027041

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-030

https://exchange.xforce.ibmcloud.com/vulnerabilities/75118

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14738

https://nvd.nist.gov/vuln/detail/CVE-2012-0185

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-0185

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-0185

EUVD