CVE-2010-1250
high · 9.3Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with malformed (1) EDG (0x88) and (2) Publisher (0x89) records, aka "Excel EDG Memory Corruption Vulnerability."
9.3
CVSS
23.8%
EPSS (exploit prob.)
98th
EPSS percentile
2010-06-08
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-94
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | excel | 2002 |
| microsoft | office | 2004 |
| microsoft | office | 2008 |
| microsoft | open_xml_file_format_converter | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://www.securityfocus.com/archive/1/511756/100/0/threaded
- http://www.securityfocus.com/bid/40528
- http://www.us-cert.gov/cas/techalerts/TA10-159B.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7593
- http://www.securityfocus.com/archive/1/511756/100/0/threaded
- http://www.securityfocus.com/bid/40528
- http://www.us-cert.gov/cas/techalerts/TA10-159B.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7593
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2010-1250