Lucene search

K
nvd[email protected]NVD:CVE-2010-3238
HistoryOct 13, 2010 - 7:00 p.m.

CVE-2010-3238

2010-10-1319:00:45
CWE-20
web.nvd.nist.gov
1

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.883

Percentile

98.7%

Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka “Negative Future Function Vulnerability.”

Affected configurations

NVD
Node
microsoftexcelMatch2002sp3
OR
microsoftexcelMatch2003sp3
OR
microsoftofficeMatch2004mac

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.883

Percentile

98.7%