Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

Microsoft Office Excel Multiple Vulnerabilities (980150)

Information

Severity

Severity

Critical

Family

Family

Windows : Microsoft Bulletins

CVSSv2 Base

CVSSv2 Base

9.3

CVSSv2 Vector

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Solution Type

Solution Type

Vendor Patch

Created

Created

14 years ago

Modified

Modified

4 years ago

Summary

This host is missing a critical security update according to Microsoft Bulletin MS10-017.

Insight

Insight

- Memory corruption error when processing malformed 'EntExU2', 'BRAI' 'MDXTuple', 'ContinueFRT12', 'MDXSet', 'ContinueFRT12', 'FnGroupName', 'BuiltInFnGroupCount', 'DbOrParamQry' and 'FnGrp12' records, which could be exploited by attackers to execute arbitrary code by tricking a user into opening a specially crafted Excel document. - An uninitialized pointer error when processing malformed data.

Affected Software

Affected Software

Microsoft Excel Viewer 2003/2007 Microsoft Office Excel 2002/2003/2007 Microsoft Office Compatibility Pack for, Excel, PowerPoint 2007 File Formats SP 1/2

Solution

Solution

The vendor has released updates. Please see the references for more information.