Description
Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers access of an uninitialized stack variable, aka "Microsoft Office Excel FNGROUPNAME Record Uninitialized Memory Vulnerability."
References
- 20100309 Microsoft Excel FNGROUPNAME Record Uninitialized Memory Vulnerability third-party-advisory
- MS10-017 vendor-advisory
- TA10-068A third-party-advisory
- oval:org.mitre.oval:def:8562 vdb-entry signature
- 1023698 vdb-entry