Unscored CVE-2010-0260 EUVD-2010-0291GHSA-wc72-922g-4fvx

Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for W…

Published Mar 10, 2010 · Updated Aug 7, 2024 · Assigned by microsoft

Description

Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet in which "a MDXTUPLE record is broken up into several records," aka "Microsoft Office Excel MDXTUPLE Record Heap Overflow Vulnerability."

References

MS10-017 vendor-advisory
TA10-068A third-party-advisory
1023698 vdb-entry
oval:org.mitre.oval:def:7862 vdb-entry signature
20100309 Microsoft Excel MDXTUPLE Record Heap Overflow Vulnerability third-party-advisory