Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-0235 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:45:10.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not perform the expected validation before creating a symbolic link, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Symbolic Link Value Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre
rity-updates/securitybulletins/2010/ms10-021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7509 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html - http://secunia.com/advisories/39373 - http://www.securitytracker.com/id?1023850
CVE ID: CVE-2010-0236 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:45:11.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not properly allocate memory for the destination key associated with a symbolic-link registry key, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Allocation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7113 - https://docs.microsoft.com/en-us/security-updates/secu
repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7113 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html - http://secunia.com/advisories/39373 - http://www.securitytracker.com/id?1023850
CVE ID: CVE-2010-0237 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:45:11.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows local users to gain privileges by creating a symbolic link from an untrusted registry hive to a trusted registry hive, aka "Windows Kernel Symbolic Link Creation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7130 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021 - http://www.us-cert.gov/cas/techalerts/TA10-1
docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html - http://secunia.com/advisories/39373 - http://www.securitytracker.com/id?1023850
CVE ID: CVE-2010-0238 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:45:11.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in registry-key validation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Registry Key Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html - https://oval.cisecurity.org/repository/search/def
2010/ms10-021 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6793 - http://secunia.com/advisories/39373 - http://www.securitytracker.com/id?1023850
CVE ID: CVE-2010-0239 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2024-08-07T00:45:11.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Router Advertisement Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-009 - http://www.us-cert.gov/cas/techalerts/TA10-040A.htm
crosoft.com/en-us/security-updates/securitybulletins/2010/ms10-009 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8478
CVE ID: CVE-2010-0240 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2024-08-07T00:45:11.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when a custom network driver is used, does not properly handle local fragmentation of Encapsulating Security Payload (ESP) over UDP packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "Header MDL Fragmentation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-009 - http://www.us-cer
ner: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-009 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8400
CVE ID: CVE-2010-0241 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2024-08-07T00:45:11.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Route Information packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Route Information Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-009 - https://oval.cisecurity.org/repository/search/definition/
t.com/en-us/security-updates/securitybulletins/2010/ms10-009 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8516 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html
CVE ID: CVE-2010-0242 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2024-10-17T18:20:03.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via crafted packets with malformed TCP selective acknowledgement (SACK) values, aka "TCP/IP Selective Acknowledgement Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-009 - https://oval.cisecurity.org/repository/search/definition
ft.com/en-us/security-updates/securitybulletins/2010/ms10-009 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8449 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html
CVE ID: CVE-2010-0243 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2024-08-07T00:45:11.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MSO.DLL in Microsoft Office XP SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Office document, aka "MSO.DLL Buffer Overflow." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-003 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8399
CVE ID: CVE-2010-0244 State: PUBLISHED Published: 2010-01-22T21:20:00 Last Updated: 2024-08-07T00:45:10.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-2530 and CVE-2009-2531. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8186 -
m Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8186 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55774
CVE ID: CVE-2010-0245 State: PUBLISHED Published: 2010-01-22T21:20:00 Last Updated: 2024-08-07T00:45:11.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3671, CVE-2009-3674, and CVE-2010-0246. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55775 - https://oval.cisecurity.org/repos
Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55775 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8491 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002
CVE ID: CVE-2010-0246 State: PUBLISHED Published: 2010-01-22T21:20:00 Last Updated: 2024-08-07T00:45:11.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3671, CVE-2009-3674, and CVE-2010-0245. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8378 -
Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8378 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55776 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002
CVE ID: CVE-2010-0247 State: PUBLISHED Published: 2010-01-22T21:20:00 Last Updated: 2024-08-07T00:45:10.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55777
itory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55777 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002
CVE ID: CVE-2010-0248 State: PUBLISHED Published: 2010-01-22T21:20:00 Last Updated: 2024-10-21T16:43:33.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55778 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre
ge.xforce.ibmcloud.com/vulnerabilities/55778 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8267 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002
CVE ID: CVE-2010-0249 State: PUBLISHED Published: 2010-01-15T17:00:00 Last Updated: 2024-08-07T00:45:11.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka "HTML Object Me
jects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka "HTML Object Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.microsoft.com/technet/security/advisory/979352.mspx - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6835 - http://osvdb.org/61697 - http://www.securityfocus.com/bid/37815 - http://www.kb.cert.org/vuls/id/492515 - http://www.exploit-db.com/exploits/11167 - http://support.microsoft.com/kb/979352 - http://blogs.technet.com/msrc/archive/2010/01/14/security-advisory-979352.aspx - https://exchange.xforce.ibmcloud.com/vulnerabilities/
echnet.com/msrc/archive/2010/01/14/security-advisory-979352.aspx - https://exchange.xforce.ibmcloud.com/vulnerabilities/55642 - http://www.us-cert.gov/cas/techalerts/TA10-055A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002 - http://news.cnet.com/8301-27080_3-10435232-245.html - http://securitytracker.com/id?1023462 - http://www.vupen.com/english/advisories/2010/0135
CVE ID: CVE-2010-0250 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2024-08-07T00:45:11.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2, and in Quartz on Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, allows remote attackers to execute arbitrary code via an AVI file with a crafted length field in an unspecified video stream, which is not properly handled by the RLE video decompressor, aka "Direc
ted length field in an unspecified video stream, which is not properly handled by the RLE video decompressor, aka "DirectShow Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8064 - http://support.avaya.com/css/P8/documents/100074167 - http://www.securityfocus.com/bid/38112 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - http://secunia.com/advisories/38511 - http://www.zerodayinitiative.com/advisories/ZDI-10-015/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-013 - http://www.securityfocus.com/archive/1/509472/100/0/thr
oft.com/en-us/security-updates/securitybulletins/2010/ms10-013 - http://www.securityfocus.com/archive/1/509472/100/0/threaded
CVE ID: CVE-2010-0251 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-0252 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2024-08-07T00:45:11.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft Data Analyzer ActiveX control (aka the Office Excel ActiveX control for Data Analysis) in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted web page that corrupts the "system state," aka "Microsoft Data Analyzer ActiveX Control Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs
a Analyzer ActiveX Control Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-008 - http://secunia.com/advisories/40059 - http://secunia.com/advisories/38503 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-034 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8424
CVE ID: CVE-2010-0253 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-0254 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:45:11.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Attribute Validation Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6819 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-028 - http://www.us-cert.gov/cas/te
6819 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-028 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE ID: CVE-2010-0255 State: PUBLISHED Published: 2010-02-04T19:00:00 Last Updated: 2024-08-07T00:45:11.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving JavaScript exploit code that constructs a reference to a file://127.0.0.1 URL, aka the dynamic OBJECT tag vulnerability, as demonstrated by obtaining the data from an index.dat file, a variant of CVE-2009-1140 and related to CVE-2008-1448. Additional Analyst Notes: - CVE Program Container
dex.dat file, a variant of CVE-2009-1140 and related to CVE-2008-1448. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/509345/100/0/threaded - http://support.avaya.com/css/P8/documents/100089747 - http://osvdb.org/62156 - http://www.securityfocus.com/bid/38055 - http://www.microsoft.com/technet/security/advisory/980088.mspx - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-035 - http://www.coresecurity.com/content/internet-explorer-dynamic-object-tag - http://www.us-cert.gov/cas/techalerts/TA10-159B.html - http://isc.sans.org/diary.html?n&storyid=8152 - http://blogs.technet.com/msrc/archive/2010/02/03/secur
/TA10-159B.html - http://isc.sans.org/diary.html?n&storyid=8152 - http://blogs.technet.com/msrc/archive/2010/02/03/security-advisory-980088-released.aspx - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7145 - http://www.securityfocus.com/bid/38056
CVE ID: CVE-2010-0256 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:45:11.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly calculate unspecified indexes associated with Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Index Calculation Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6732 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-028 - http://ww
.mitre.oval%3Adef%3A6732 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-028 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE ID: CVE-2010-0257 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T00:45:11.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Excel 2002 SP3 does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel Record Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8617 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017 - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - htt
.com/en-us/security-updates/securitybulletins/2010/ms10-017 - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - http://www.securitytracker.com/id?1023698
CVE ID: CVE-2010-0258 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T00:45:11.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that causes memory to be interpreted as a different object type than intended, aka "Microsoft Office Excel Sheet Object Type Confusion Vulnerabil
interpreted as a different object type than intended, aka "Microsoft Office Excel Sheet Object Type Confusion Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=859 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8545 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017 - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - http://www.securitytracker.com/id?1023698
CVE ID: CVE-2010-0259 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-0260 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T00:45:11.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet in which "a MDXTUPLE record is broken up into several records," aka "Microsoft Office Excel MDXTUPLE Record Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securit