CVE-2010-3240

Microsoft Excel 2002 SP3 and 2007 SP2; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Real Time Data Array Record Vulnerability."
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:excel_viewer:*:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*

History

No history.

Information

Published : 2010-10-13 19:00

Updated : 2024-02-04 17:54


NVD link : CVE-2010-3240

Mitre link : CVE-2010-3240

CVE.ORG link : CVE-2010-3240


JSON object : View

Products Affected

microsoft

  • office_compatibility_pack
  • excel_viewer
  • excel
CWE
CWE-20

Improper Input Validation