PT-2010-2061 · Microsoft · Office 2004+3

Publicado 2010-03-10 · Atualizado 2018-10-12 · CVE-2010-0264

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel versions prior to the fixed version

Description A remote code execution issue exists in the way Microsoft Office Excel handles specially crafted Excel files. This allows an attacker to potentially take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Office Excel 2002 SP3, update to a version that includes the fix for this issue. For Office 2004 and 2008 for Mac, update to a version that includes the fix for this issue. For Open XML File Format Converter for Mac, update to a version that includes the fix for this issue. As a temporary workaround, consider avoiding the use of specially crafted Excel files until a patch is available.

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2010-0264

Produtos afetados

Office Excel

Office 2004

Office 2008

Open Xml File Format Converter For Mac

Referências · 8

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7888 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0264 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2010-0264 · Nota de Segurança
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-017 · Nota
• http://us-cert.gov/cas/techalerts/TA10-068A.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0264 · Nota
• http://securitytracker.com/id?1023698 · Nota