CVE-2010-0821 — Code Injection in Microsoft Excel

CWE-94 — Code Injection3 documents3 sources
Severity
9.3CRITICALNVD
EPSS
57.6%
top 1.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Microsoft ExcelMicrosoft OfficeMicrosoft Office Compatibility Pack
Timeline
PublishedJun 8
Latest updateMay 2

Description

Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via an Excel file with a crafted SxView record, related to improper validation of unspecified structures, aka "Excel Record Parsing Memory Corruption Vu…

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDmicrosoft/excel2002, 2003, 2007+2
▶NVDmicrosoft/office2004, 2008+1

🔴Vulnerability Details

2
GHSA
GHSA-mf23-rh92-325x: Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Form↗2022-05-02
▶
CVEList
CVE-2010-0821: Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Form↗2010-06-08
▶
CVE-2010-0821 — Code Injection in Microsoft Excel | cvebase