Unscored CVE-2010-3238 EUVD-2010-3237GHSA-75c7-jhv8-2qrh

Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows rem…

Published Oct 13, 2010 · Updated Aug 7, 2024 · Assigned by microsoft

Description

Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Negative Future Function Vulnerability."

References

oval:org.mitre.oval:def:6872 vdb-entry signature
MS10-080 vendor-advisory
TA10-285A third-party-advisory