Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers access of an uninitialized stack variable, aka "Microsoft Office Excel FNGROUPNAME Record Uninitialized Memory Vulnerability."
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2010-03-10 14:30
Updated : 2018-10-12 14:56
NVD link : CVE-2010-0262
Mitre link : CVE-2010-0262
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
microsoft
- office_excel_viewer
- excel
- office_compatibility_pack
- office
- open_xml_file_format_converter
- office_sharepoint_server