PT-2010-2955 · Microsoft · Open Xml File Format Converter For Mac+3
Publicado
2010-06-08
·
Atualizado
2018-10-12
·
CVE-2010-1250
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft Office Excel 2002 SP3
Office 2004 for Mac
Office 2008 for Mac
Open XML File Format Converter for Mac
Description
A remote code execution issue exists in the way that Microsoft Office Excel handles specially crafted Excel files, potentially allowing attackers to execute arbitrary code via an Excel file with malformed records. This could enable an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.
Recommendations
For Microsoft Office Excel 2002 SP3, update to a version that is not affected by this issue.
For Office 2004 for Mac, update to a version that is not affected by this issue.
For Office 2008 for Mac, update to a version that is not affected by this issue.
For Open XML File Format Converter for Mac, update to a version that is not affected by this issue.
As a temporary workaround, consider avoiding the use of specially crafted Excel files until a patch is available.
Correção
RCE
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Office Excel
Office 2004 For Mac
Office 2008 For Mac
Open Xml File Format Converter For Mac