CVE-2010-0823 — Code Injection in Microsoft Excel

CWE-94 — Code Injection3 documents3 sources
Severity
9.3CRITICALNVD
EPSS
57.3%
top 1.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Microsoft ExcelMicrosoft OfficeMicrosoft Office Compatibility Pack
Timeline
PublishedJun 8
Latest updateMay 2

Description

Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-1247 and CVE-2010-1249.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDmicrosoft/excel2002, 2003, 2007+2
▶NVDmicrosoft/office2004, 2008+1

🔴Vulnerability Details

2
GHSA
GHSA-prhp-4vw3-h923: Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Form↗2022-05-02
▶
CVEList
CVE-2010-0823: Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Form↗2010-06-08
▶
CVE-2010-0823 — Code Injection in Microsoft Excel | cvebase