deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-3110
Published: 2010-10-12
Description: Multiple buffer overflows in the Novell Client novfs module for the Linux kernel in SUSE Linux Enterprise 11 SP1 and openSUSE 11.3 allow local users to gain privileges via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00000.html
CVE: CVE-2010-2951
Published: 2010-10-12
Description: dns_internal.cc in Squid 3.1.6, when IPv6 DNS resolution is not enabled, accesses an invalid socket during an IPv4 TCP DNS query, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via vectors that trigger an IPv4 DNS response with the TC bit set.
CVSS Score: 5.0 (MEDIUM)
References: http://bazaar.launchpad.net/~squid/squid/3.1/revision/10072; http://bugs.gentoo.org/show_bug.cgi?id=334263; http://bugs.squid-cache.org/show_bug.cgi?id=3009
CVE: CVE-2010-3083
Published: 2010-10-12
Description: sys/ssl/SslSocket.cpp in qpidd in Apache Qpid, as used in Red Hat Enterprise MRG before 1.2.2 and other products, when SSL is enabled, allows remote attackers to cause a denial of service (daemon outage) by connecting to the SSL port but not participating in an SSL handshake.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/41710; http://svn.apache.org/viewvc/qpid/trunk/qpid/cpp/src/qpid/sys/ssl/SslSocket.cpp?r1=790291&r2=790290&pathrev=790291&view=patch; http://www.openwall.com/lists/oss-security/2010/10/08/1
CVE: CVE-2010-3085
Published: 2010-10-12
Description: The network-play implementation in Mednafen before 0.8.D might allow remote servers to execute arbitrary code via unspecified vectors, related to "stack manipulation" issues.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://sourceforge.net/news/?group_id=150840&id=287363; http://www.openwall.com/lists/oss-security/2010/09/09/8; http://www.openwall.com/lists/oss-security/2010/09/11/3
CVE: CVE-2010-3701
Published: 2010-10-12
Description: lib/MessageStoreImpl.cpp in Red Hat Enterprise MRG before 1.2.2 allows remote authenticated users to cause a denial of service (stack memory exhaustion and broker crash) via a large persistent message.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://www.redhat.com/support/errata/RHSA-2010-0756.html; http://www.redhat.com/support/errata/RHSA-2010-0757.html; https://bugzilla.redhat.com/show_bug.cgi?id=634014
CVE: CVE-2010-0808
Published: 2010-10-13
Description: Microsoft Internet Explorer 6 and 7 on Windows XP and Vista does not prevent script from simulating user interaction with the AutoComplete feature, which allows remote attackers to obtain sensitive form information via a crafted web site, aka "AutoComplete Information Disclosure Vulnerability."
CVSS Score: 2.6 (LOW)
CWE: CWE-200
References: http://support.avaya.com/css/P8/documents/100113324; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6889
CVE: CVE-2010-1883
Published: 2010-10-13
Description: Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted table in an embedded font, aka "Embedded OpenType Font Integer Overflow Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-189, CWE-190
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-076; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6881
CVE: CVE-2010-2740
Published: 2010-10-13
Description: The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly perform memory allocation during font parsing, which allows local users to gain privileges via a crafted application, aka "OpenType Font Parsing Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://support.avaya.com/css/P8/documents/100113218; http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-078
CVE: CVE-2010-2741
Published: 2010-10-13
Description: The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 performs an incorrect integer calculation during font processing, which allows local users to gain privileges via a crafted application, aka "OpenType Font Validation Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://support.avaya.com/css/P8/documents/100113218; http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-078
CVE: CVE-2010-2744
Published: 2010-10-13
Description: The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly manage a window class, which allows local users to gain privileges by creating a window, then using (1) the SetWindowLongPtr function to modify the popup menu structure, or (2) the SwitchWndProc function with a switch window information pointer, which is not re-initialized when a WM_NCCREATE message is processed, aka "Win32k Window Class Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://mista.nu/blog/2010/12/01/windows-class-handling-gone-wrong/; http://www.exploit-db.com/exploits/15894; http://www.us-cert.gov/cas/techalerts/TA10-285A.html
CVE: CVE-2010-2745
Published: 2010-10-13
Description: Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-assisted remote attackers to execute arbitrary code via crafted media content referenced in an HTML document, aka "Windows Media Player Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securitytracker.com/id?1024550; http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-082
CVE: CVE-2010-2746
Published: 2010-10-13
Description: Heap-based buffer overflow in Comctl32.dll (aka the common control library) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when a third-party SVG viewer is used, allows remote attackers to execute arbitrary code via a crafted HTML document that triggers unspecified messages from this viewer, aka "Comctl32 Heap Overflow Vulnerability."
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id?1024549; http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-081
CVE: CVE-2010-2747
Published: 2010-10-13
Description: Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Uninitialized Pointer Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/archive/1/514310/100/0/threaded; http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079
CVE: CVE-2010-2748
Published: 2010-10-13
Description: Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly check an unspecified boundary during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Boundary Check Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7375
CVE: CVE-2010-2750
Published: 2010-10-13
Description: Array index error in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/archive/1/514292/100/0/threaded; http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079
CVE: CVE-2010-3214
Published: 2010-10-13
Description: Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; Word Viewer; Office Web Apps; and Word Web App allows remote attackers to execute arbitrary code via a crafted Word document, aka "Word Stack Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/archive/1/514302/100/0/threaded; http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079
CVE: CVE-2010-3215
Published: 2010-10-13
Description: Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle unspecified return values during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Return Value Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/archive/1/514295/100/0/threaded; http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079
CVE: CVE-2010-3216
Published: 2010-10-13
Description: Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing bookmarks that trigger use of an invalid pointer and memory corruption, aka "Word Bookmarks Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/archive/1/514291/100/0/threaded; http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079
CVE: CVE-2010-3217
Published: 2010-10-13
Description: Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override (LFO) records, aka "Word Pointer Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://secunia.com/secunia_research/2010-76/; http://www.securityfocus.com/archive/1/514298/100/0/threaded; http://www.securityfocus.com/archive/1/515440/100/0/threaded
CVE: CVE-2010-3218
Published: 2010-10-13
Description: Heap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via malformed records in a Word document, aka "Word Heap Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7010
CVE: CVE-2010-3219
Published: 2010-10-13
Description: Array index vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Parsing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/archive/1/514305/100/0/threaded; http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079
CVE: CVE-2010-3220
Published: 2010-10-13
Description: Unspecified vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Parsing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6792
CVE: CVE-2010-3221
Published: 2010-10-13
Description: Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Parsing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7032
CVE: CVE-2010-3222
Published: 2010-10-13
Description: Stack-based buffer overflow in the Remote Procedure Call Subsystem (RPCSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted LPC message that requests an LRPC connection from an LPC server to a client, aka "LPC Message Buffer Overrun Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id?1024553; http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-084
CVE: CVE-2010-3223
Published: 2010-10-13
Description: The user interface in Microsoft Cluster Service (MSCS) in Microsoft Windows Server 2008 R2 does not properly set administrative-share permissions for new cluster disks that are shared as part of a failover cluster, which allows remote attackers to read or modify data on these disks via requests to the associated share, aka "Permissions on New Cluster Disks Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.securitytracker.com/id?1024558; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-086; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6789
CVE: CVE-2010-3225
Published: 2010-10-13
Description: Use-after-free vulnerability in the Media Player Network Sharing Service in Microsoft Windows Vista SP1 and SP2 and Windows 7 allows remote attackers to execute arbitrary code via a crafted Real Time Streaming Protocol (RTSP) packet, aka "RTSP Use After Free Vulnerability."
CVSS Score: 7.6 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-075; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6684
CVE: CVE-2010-3228
Published: 2010-10-13
Description: The JIT compiler in Microsoft .NET Framework 4.0 on 64-bit platforms does not properly perform optimizations, which allows remote attackers to execute arbitrary code via a crafted .NET application that triggers memory corruption, aka ".NET Framework x64 JIT Compiler Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-077; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6824
CVE: CVE-2010-3229
Published: 2010-10-13
Description: The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of service (LSASS outage and reboot) via a crafted packet, aka "TLSv1 Denial of Service Vulnerability."
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: http://support.avaya.com/css/P8/documents/100113338; http://www.securityfocus.com/bid/43780; http://www.us-cert.gov/cas/techalerts/TA10-285A.html
CVE: CVE-2010-3230
Published: 2010-10-13
Description: Integer overflow in Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel document with crafted record information, aka "Excel Record Parsing Integer Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-080; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7042
CVE: CVE-2010-3231
Published: 2010-10-13
Description: Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel Record Parsing Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-080; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7475
CVE: CVE-2010-3232
Published: 2010-10-13
Description: Microsoft Excel 2003 SP3 and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel File Format Parsing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-080; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7575
CVE: CVE-2010-3233
Published: 2010-10-13
Description: Microsoft Excel 2002 SP3 and 2003 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted .wk3 (aka Lotus 1-2-3 workbook) file, aka "Lotus 1-2-3 Workbook Parsing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-080; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6737
CVE: CVE-2010-3234
Published: 2010-10-13
Description: Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Substream Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-080; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7555
CVE: CVE-2010-3235
Published: 2010-10-13
Description: Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Biff Record Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-080; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7028
CVE: CVE-2010-3236
Published: 2010-10-13
Description: Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Out Of Bounds Array Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-080; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7209
CVE: CVE-2010-3237
Published: 2010-10-13
Description: Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Merge Cell Record Pointer Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-080; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6727
CVE: CVE-2010-3238
Published: 2010-10-13
Description: Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Negative Future Function Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-080; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6872
CVE: CVE-2010-3239
Published: 2010-10-13
Description: Microsoft Excel 2002 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Extra Out of Boundary Record Parsing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-080; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7616
CVE: CVE-2010-3240
Published: 2010-10-13
Description: Microsoft Excel 2002 SP3 and 2007 SP2; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Real Time Data Array Record Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-080; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7196
CVE: CVE-2010-3241
Published: 2010-10-13
Description: Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Out-of-Bounds Memory Write in Parsing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-080; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6738
CVE: CVE-2010-3242
Published: 2010-10-13
Description: Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Ghost Record Type Parsing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-285A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-080; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6902