Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMicrosoftCVE-2010-1248
HistoryJun 08, 2010 - 8:30 p.m.

CVE-2010-1248

2010-06-0820:30:02
CWE-94
microsoft
web.nvd.nist.gov
54
cve-2010-1248
buffer overflow
microsoft office
excel
remote code execution
hfpicture
memory corruption

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.93

Percentile

99.1%

JSON

Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed HFPicture (0x866) record, aka “Excel HFPicture Memory Corruption Vulnerability.”

Affected configurations

Nvd
Node
microsoftexcelMatch2002sp3
Node
microsoftofficeMatch2004mac
VendorProductVersionCPE
microsoftexcel2002cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*
microsoftoffice2004cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*

Related

cvelist 1
exploitpack 2
seebug 4
nvd 1
securityvulns 3
prion 1
checkpoint_advisories 2
exploitdb 2
nessus 2
openvas 2
cvelist
cvelist
CVE-2010-1248
2010-06-08 20:00:00
exploitpack
exploitpack
Microsoft Excel - WOPT Record Parsing Heap Memory Corruption
2010-09-21 00:00:00
Microsoft Excel - HFPicture Record Parsing Remote Code Execution
2010-09-16 00:00:00
seebug
seebug
Microsoft Excel - HFPicture Record Parsing Remote Code Execution Vulnerability
2014-07-01 00:00:00
Microsoft Excel HFPicture Record Parsing Remote Code Execution Vulnerability
2010-09-17 00:00:00
Microsoft Excel - WOPT Record Parsing Heap Memory Corruption
2014-07-01 00:00:00
nvd
nvd
CVE-2010-1248
2010-06-08 20:30:02
securityvulns
securityvulns
VUPEN Security Research - Microsoft Office Excel HFPicture Buffer Overflow Vulnerability (CVE-2010-1248)
2010-06-09 00:00:00
Microsoft Security Bulletin MS10-038 - Important Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (2027452)
2010-06-09 00:00:00
Microsoft Office multiple security vulnerabilities
2010-06-14 00:00:00
prion
prion
Memory corruption
2010-06-08 20:30:00
checkpoint_advisories
checkpoint_advisories
Microsoft Excel HFPicture Record Stack Overflow (MS10-038) - Ver2 (CVE-2010-1248)
2014-03-31 00:00:00
Microsoft Excel HFPicture Record Stack Overflow (MS10-038; CVE-2010-1248)
2010-06-08 00:00:00
exploitdb
exploitdb
Microsoft Excel - HFPicture Record Parsing Remote Code Execution
2010-09-16 00:00:00
Microsoft Excel - WOPT Record Parsing Heap Memory Corruption
2010-09-21 00:00:00
nessus
nessus
MS10-038: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2027452) (Mac OS X)
2010-10-20 00:00:00
MS10-038: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (2027452)
2010-06-09 00:00:00
openvas
openvas
Microsoft Office Excel Remote Code Execution Vulnerabilities (2027452)
2010-06-09 00:00:00
Microsoft Office Excel Remote Code Execution Vulnerabilities (2027452)
2010-06-09 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.93

Percentile

99.1%

JSON
Related for CVE-2010-1248
cvelist1exploitpack2seebug4nvd1securityvulns3prion1checkpoint_advisories2exploitdb2nessus2openvas2