9.3

CVE-2012-0185

EPSS 64.69%
Veröffentlicht 09.05.2012 00:55:01
Zuletzt bearbeitet 29.04.2026 01:13:23
Quelle secure@microsoft.com
CVE-Watchlists
Login
Unerledigt
Login

Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening, aka "Excel MergeCells Record Heap Overflow Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

NVD 7 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Excel Version2007 Updatesp2

Microsoft ≫ Excel Version2007 Updatesp3

Microsoft ≫ Excel Version2010

Microsoft ≫ Excel Version2010 Updatesp1

Microsoft ≫ Excel Viewer

Microsoft ≫ Office Compatibility Pack Updatesp2

Microsoft ≫ Office Compatibility Pack Updatesp3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	64.69%	0.983

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.us-cert.gov/cas/techalerts/TA12-129A.html

US Government Resource

http://secunia.com/advisories/49112

http://www.securitytracker.com/id?1027041

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-030

https://exchange.xforce.ibmcloud.com/vulnerabilities/75118

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14738

https://nvd.nist.gov/vuln/detail/CVE-2012-0185

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-0185

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-0185

EUVD