Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-3203 State: PUBLISHED Published: 2010-09-03T17:12:00Z Last Updated: 2024-09-16T20:03:42.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the PicSell (com_picsell) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the dflink parameter in a prevsell dwnfree action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41187 - http://www.exploit-db.com/exploits/14845
CVE ID: CVE-2010-3204 State: PUBLISHED Published: 2010-09-03T17:12:00 Last Updated: 2024-08-07T03:03:18.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to (1) post.php, (2) article.php, (3) blog.php, or (4) home.php in pec_templates/nova-blue/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1008-exploits/peciocms-rfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/61433 - http://eidelweiss-advisories.blogspot.com/2010/08/pecio-cms-v205-template-multiple-remote.
d.com/vulnerabilities/61433 - http://eidelweiss-advisories.blogspot.com/2010/08/pecio-cms-v205-template-multiple-remote.html - http://www.exploit-db.com/exploits/14815
CVE ID: CVE-2010-3205 State: PUBLISHED Published: 2010-09-03T17:12:00 Last Updated: 2024-08-07T03:03:18.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Textpattern CMS 4.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1008-exploits/textpattern-rfi.txt - http://www.exploit-db.com/exploits/14823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61475
CVE ID: CVE-2010-3206 State: PUBLISHED Published: 2010-09-03T17:12:00 Last Updated: 2024-08-07T03:03:18.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) lang parameter to modules/guestbook/blocks/control.block.php, (2) main_module parameter to index.php, and (3) getFile parameter to includes/general.functions.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1008-exploits/diycms-rfi.txt - http://www.exploit-db.com/exploits/14822 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61454
CVE ID: CVE-2010-3207 State: PUBLISHED Published: 2010-09-03T17:12:00 Last Updated: 2024-08-07T03:03:18.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in GaleriaSHQIP 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the album_id parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.xenuser.org/documents/security/galeriaSHQIP_sqli.txt - http://packetstormsecurity.org/1008-exploits/galeriashqip-sql.txt - http://secunia.com/advisories/41113 - http://www.exploit-db.com/exploits/14826
org/1008-exploits/galeriashqip-sql.txt - http://secunia.com/advisories/41113 - http://www.exploit-db.com/exploits/14826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61456 - http://osvdb.org/67690
CVE ID: CVE-2010-3208 State: PUBLISHED Published: 2010-09-03T17:12:00 Last Updated: 2024-08-07T03:03:18.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ajax.php in Wiccle Web Builder (WWB) 1.00 and 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the post_text parameter in a site custom_search action to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.packetstormsecurity.com/1008-exploits/wiccle-xss.txt - http://osvdb.org/67691 - http://secunia.com/advisories/41191 - https://exchange.xforce.ibmcloud.co
oits/wiccle-xss.txt - http://osvdb.org/67691 - http://secunia.com/advisories/41191 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61466
CVE ID: CVE-2010-3209 State: PUBLISHED Published: 2010-09-03T17:12:00 Last Updated: 2024-08-07T03:03:18.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Seagull 0.6.7 allow remote attackers to execute arbitrary PHP code via a URL in the includeFile parameter to (1) Config/Container.php and (2) HTML/QuickForm.php in fog/lib/pear/, the (3) driverpath parameter to fog/lib/pear/DB/NestedSet.php, and the (4) path parameter to fog/lib/pear/DB/NestedSet/Output.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1008-exploits/seagull-rfi.txt - https://exchange.xforce.ibmcloud.com/vul
r: References: - http://packetstormsecurity.org/1008-exploits/seagull-rfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/61470 - http://www.exploit-db.com/exploits/14841
CVE ID: CVE-2010-3210 State: PUBLISHED Published: 2010-09-03T17:12:00 Last Updated: 2024-08-07T03:03:18.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Multi-lingual E-Commerce System 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) checkout2-CYM.php, (2) checkout2-EN.php, (3) checkout2-FR.php, (4) cat-FR.php, (5) cat-EN.php, (6) cat-CYM.php, (7) checkout1-CYM.php, (8) checkout1-EN.php, (9) checkout1-FR.php, (10) prod-CYM.php, (11) prod-EN.php, and (12) prod-FR.php in inc/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/
2) prod-FR.php in inc/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1008-exploits/mlecomsys-rfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/61464 - http://www.exploit-db.com/exploits/14835
CVE ID: CVE-2010-3211 State: PUBLISHED Published: 2010-09-03T17:12:00 Last Updated: 2024-08-07T03:03:18.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the JE FAQ Pro (com_jefaqpro) component 1.5.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via category categorylist operations with (1) the catid parameter or (2) the catid parameter in a lists action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41078 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61485 - http://www.exploit-db.com/exploits/14846
CVE ID: CVE-2010-3212 State: PUBLISHED Published: 2010-09-03T17:12:00 Last Updated: 2024-08-07T03:03:18.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Seagull 0.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via the frmQuestion parameter in a retrieve action, in conjunction with a user/password PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/67689 - http://www.exploit-db.com/exploits/14838 - http://packetstormsecurity.org/1008-exploits/seagull-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/61469 - http://secunia.com/advisories/41169
CVE ID: CVE-2010-3213 State: PUBLISHED Published: 2010-09-07T17:00:00 Last Updated: 2024-08-07T03:03:18.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41462 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60164 - http://sites.google.com/site/tentacoloviola/pwning-corporate-webmails - http://www.exploit-d
com/vulnerabilities/60164 - http://sites.google.com/site/tentacoloviola/pwning-corporate-webmails - http://www.exploit-db.com/exploits/14285
CVE ID: CVE-2010-3214 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:18.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; Word Viewer; Office Web Apps; and Word Web App allows remote attackers to execute arbitrary code via a crafted Word document, aka "Word Stack Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514302/100/0/threaded -
al Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514302/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7322
CVE ID: CVE-2010-3215 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:18.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle unspecified return values during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Return Value Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514295/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079 - https://oval.cisecurity.org/repositor
ttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6974 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html
CVE ID: CVE-2010-3216 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:18.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing bookmarks that trigger use of an invalid pointer and memory corruption, aka "Word Bookmarks Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079 - http://www.securityfocus.com/archive/1/514291/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA10-285A.html - https://oval.cisecuri
focus.com/archive/1/514291/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA10-285A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7529
CVE ID: CVE-2010-3217 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:18.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override (LFO) records, aka "Word Pointer Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6695 - http://www.securityfocus.com/archive/1/514298/100/0/threaded - http://secunia.com/secunia_research/2010-76/ - https://docs.microsoft.com/en-us/security-updates/securit
00/0/threaded - http://secunia.com/secunia_research/2010-76/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079 - http://www.securityfocus.com/archive/1/515440/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA10-285A.html
CVE ID: CVE-2010-3218 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:18.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via malformed records in a Word document, aka "Word Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7010 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html
CVE ID: CVE-2010-3219 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:18.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7019 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079 - http://www.securityfocus.com/archive/1/514305/100/0/threaded - http://www.us-cert.gov
/securitybulletins/2010/ms10-079 - http://www.securityfocus.com/archive/1/514305/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA10-285A.html
CVE ID: CVE-2010-3220 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:18.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6792 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html
CVE ID: CVE-2010-3221 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:18.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%
/securitybulletins/2010/ms10-079 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7032 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html
CVE ID: CVE-2010-3222 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:18.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Remote Procedure Call Subsystem (RPCSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted LPC message that requests an LRPC connection from an LPC server to a client, aka "LPC Message Buffer Overrun Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-084 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.o
ty-updates/securitybulletins/2010/ms10-084 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7175 - http://www.securitytracker.com/id?1024553 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html
CVE ID: CVE-2010-3223 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:18.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user interface in Microsoft Cluster Service (MSCS) in Microsoft Windows Server 2008 R2 does not properly set administrative-share permissions for new cluster disks that are shared as part of a failover cluster, which allows remote attackers to read or modify data on these disks via requests to the associated share, aka "Permissions on New Cluster Disks Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-086 - https://
am Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-086 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6789 - http://www.securitytracker.com/id?1024558
CVE ID: CVE-2010-3224 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3225 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:18.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the Media Player Network Sharing Service in Microsoft Windows Vista SP1 and SP2 and Windows 7 allows remote attackers to execute arbitrary code via a crafted Real Time Streaming Protocol (RTSP) packet, aka "RTSP Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-075 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6684 - http://www.us-
/ms10-075 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6684 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html
CVE ID: CVE-2010-3226 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3227 State: PUBLISHED Published: 2010-10-26T21:00:00 Last Updated: 2024-08-07T03:03:18.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class (MFC) Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows context-dependent attackers to execute arbitrary code via a long window title that this library attempts to create at the request of an application, as demonstrated by the Trident PowerZip 7.2 Build 4010 application, aka "Windows
reate at the request of an application, as demonstrated by the Trident PowerZip 7.2 Build 4010 application, aka "Windows MFC Document Title Updating Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024557 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6696 - http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100705-%281%29 - http://www.exploit-db.com/exploits/13921/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-074
CVE ID: CVE-2010-3228 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:18.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JIT compiler in Microsoft .NET Framework 4.0 on 64-bit platforms does not properly perform optimizations, which allows remote attackers to execute arbitrary code via a crafted .NET application that triggers memory corruption, aka ".NET Framework x64 JIT Compiler Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6824 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-077 - http:/
org.mitre.oval%3Adef%3A6824 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-077 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html
CVE ID: CVE-2010-3229 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:18.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of service (LSASS outage and reboot) via a crafted packet, aka "TLSv1 Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mit
st Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6806 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-085 - http://support.avaya.com/css/P8/documents/100113338 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html - http://www.securityfocus.com/bid/43780
CVE ID: CVE-2010-3230 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:18.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel document with crafted record information, aka "Excel Record Parsing Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7042 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-080 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html
CVE ID: CVE-2010-3231 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:18.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel Record Parsing Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7475 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-080 -
oval%3Aorg.mitre.oval%3Adef%3A7475 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-080 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html
CVE ID: CVE-2010-3232 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:18.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2003 SP3 and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel File Format Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval
s: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7575 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-080 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html