CVE-2010-0261

published 2010-03-10

CVE-2010-0261: Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and…

Priority P2 58 critical 9.3 CVSS 2.0

AV N AC M Au N C C I C A C

Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet in which "a MDXSET record is broken up into several records," aka "Microsoft Office Excel MDXSET Record Heap Overflow Vulnerability."

Affected

7 ranges

Vendor	Product	Version range	Fixed in
microsoft	excel	—	—
microsoft	excel	—	—
microsoft	excel	—	—
microsoft	office	—	—
microsoft	office	—	—
microsoft	office_compatibility_pack	—	—
microsoft	office_sharepoint_server	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-119