CVE-2010-0258

Опубликовано: 10 мар. 2010

Источник: nvd

CVSS3: 7.8

CVSS2: 9.3

EPSS Высокий

Описание

Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that causes memory to be interpreted as a different object type than intended, aka "Microsoft Office Excel Sheet Object Type Confusion Vulnerability."

Ссылки

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=859
Broken Link
http://www.securitytracker.com/id?1023698
Broken Link
Third Party Advisory
VDB Entry
http://www.us-cert.gov/cas/techalerts/TA10-068A.html
Third Party Advisory
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017
Patch
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8545
Broken Link
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=859
Broken Link
http://www.securitytracker.com/id?1023698
Broken Link
Third Party Advisory
VDB Entry
http://www.us-cert.gov/cas/techalerts/TA10-068A.html
Third Party Advisory
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017
Patch
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8545
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2004:*:*:*:*:mac_os_x:*:*

cpe:2.3:a:microsoft:office:2008:*:*:*:*:macos:*:*

cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_excel_viewer:-:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_excel_viewer:-:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:*:*:*:macos:*:*

EPSS

Процентиль: 99%

0.7144

Высокий

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-843

Связанные уязвимости

GHSA-mqmr-46gm-2w7q