Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers access of an uninitialized stack variable, aka "Microsoft Office Excel FNGROUPNAME Record Uninitialized Memory Vulnerability."
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2010-03-10 22:30
Updated : 2024-02-04 17:54
NVD link : CVE-2010-0262
Mitre link : CVE-2010-0262
CVE.ORG link : CVE-2010-0262
JSON object : View
Products Affected
microsoft
- office_compatibility_pack
- office
- office_sharepoint_server
- open_xml_file_format_converter
- excel
- office_excel_viewer
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')