CVSS: 9.3EPSS: 74%CPEs: 1EXPL: 1CVE-2010-1246 – Excel RTD - Memory Corruption
https://notcve.org/view.php?id=CVE-2010-1246
08 Jun 2010 — Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record, aka "Excel RTD Memory Corruption Vulnerability." Vulnerabilida no especificada en Microsoft Office Excel 2002 SP3 permite a atacantes remotos ejecutar código de su elección a través de un fichero Excel manipulado, conocido como "Vulnerabilidad de corrupción de memoria RTD para Excel" • https://www.exploit-db.com/exploits/14966 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 9.3EPSS: 92%CPEs: 2EXPL: 0CVE-2010-1252
https://notcve.org/view.php?id=CVE-2010-1252
08 Jun 2010 — Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel String Variable Vulnerability." Vulnerabilidad no especificada en Microsoft Office Excel 2002 SP3 y Office 2004 para Mac permite a atacantes remotos ejecutar código de su elección a través de un fichero Excel manipulado, conocido como "Vulnerabilidad cadena variable de Excel". • http://www.securityfocus.com/bid/40530 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 9.3EPSS: 86%CPEs: 4EXPL: 0CVE-2010-1250
https://notcve.org/view.php?id=CVE-2010-1250
08 Jun 2010 — Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with malformed (1) EDG (0x88) and (2) Publisher (0x89) records, aka "Excel EDG Memory Corruption Vulnerability." Vulnerabilidad no especificada en Microsoft Office Excel 2002 SP3, Office 2004 para Mac, Office 2008 para Mac, y Open XML File Format Converter para Mac permite a atacantes remotos ej... • http://www.securityfocus.com/archive/1/511756/100/0/threaded • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 10.0EPSS: 79%CPEs: 11EXPL: 0CVE-2010-0821 – Microsoft Office Excel SxView Record Parsing Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2010-0821
08 Jun 2010 — Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via an Excel file with a crafted SxView record, related to improper validation of unspecified structures, aka "Excel Record Parsing Memory Corruption Vulnerability,... • http://www.securityfocus.com/archive/1/511729/100/0/threaded • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 10.0EPSS: 77%CPEs: 8EXPL: 0CVE-2010-1253 – Microsoft Office Excel DBQueryExt Record Unspecified ADO Object Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2010-1253
08 Jun 2010 — Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via an Excel file with crafted DBQueryExt records that allow a function call to a "user-controlled pointer," aka "Excel ADO Object Vulnerability." Office Excel 2002 SP3, 2007 SP1 y SP2; Office 2004 para Mac; Office 2008 para Mac; Open ... • http://osvdb.org/65228 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 9.3EPSS: 66%CPEs: 15EXPL: 0CVE-2010-0257
https://notcve.org/view.php?id=CVE-2010-0257
10 Mar 2010 — Microsoft Office Excel 2002 SP3 does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel Record Memory Corruption Vulnerability." Microsoft Office Excel v2002 SP3 no valida adecuadamente el formato de archivo Excel, lo que permite a atacantes remotos ejecutar código de su elección a através de una hoja de cálculo manipulada, conocido también como "Vulnerabilidad de corrupción de registro de memoria Microsoft... • http://www.securitytracker.com/id?1023698 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 9.3EPSS: 20%CPEs: 13EXPL: 0CVE-2010-0258
https://notcve.org/view.php?id=CVE-2010-0258
10 Mar 2010 — Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that causes memory to be interpreted as a different object type than intended, aka "Microsoft Office Excel Sheet Object Type ... • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=859 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 9.3EPSS: 60%CPEs: 15EXPL: 0CVE-2010-0260
https://notcve.org/view.php?id=CVE-2010-0260
10 Mar 2010 — Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet in which "a MDXTUPLE record is broken up into several records," aka "Microsoft Office Excel MDXTUPLE Record Heap Overflow Vulnerability." Desbordamiento de búfer basado en memoria dinámica en Microsoft Office Excel 2007 SP1 y SP2; Office Ex... • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=862 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 9.3EPSS: 74%CPEs: 15EXPL: 0CVE-2010-0261
https://notcve.org/view.php?id=CVE-2010-0261
10 Mar 2010 — Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet in which "a MDXSET record is broken up into several records," aka "Microsoft Office Excel MDXSET Record Heap Overflow Vulnerability." Desbordamiento de búfer basado en memoria dinámica (heap) en Microsoft Office Excel v2007 SP1 y SP2 y Office Compatibility Pack para Word, E... • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=861 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 73%CPEs: 15EXPL: 0CVE-2010-0262
https://notcve.org/view.php?id=CVE-2010-0262
10 Mar 2010 — Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers access of an uninitialized stack variable, aka "Microsoft Office Excel FNGROUPNAME Record Uninitialized Memory Vulnerability." Microsoft Office Excel 2007 SP1 y SP2 y Office 2004 para Mac no analiza correctamente el formato de archivo Excel, lo cual permite a atacantes remotos ejecutar código a su elección... • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=860 • CWE-94: Improper Control of Generation of Code ('Code Injection') •