Lucene search

K
nvd[email protected]NVD:CVE-2010-3232
HistoryOct 13, 2010 - 7:00 p.m.

CVE-2010-3232

2010-10-1319:00:45
CWE-20
web.nvd.nist.gov
5

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.955

Percentile

99.4%

Microsoft Excel 2003 SP3 and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka “Excel File Format Parsing Vulnerability.”

Affected configurations

Nvd
Node
microsoftexcelMatch2003sp3
OR
microsoftexcelMatch2007sp3
OR
microsoftexcel_viewersp2
OR
microsoftofficeMatch2004mac
OR
microsoftofficeMatch2008mac
OR
microsoftoffice_compatibility_packMatch2007sp2
OR
microsoftopen_xml_file_format_convertermac

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.955

Percentile

99.4%