deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-1963
Published: 2010-06-07
Description: Cross-site scripting (XSS) vulnerability in HP ServiceCenter allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6863&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6863&w=2
CVE: CVE-2010-2023
Published: 2010-06-07
Description: transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the st_nlink field of mailbox files, which allows local users to cause a denial of service or possibly gain privileges by creating a hard link to another user's file.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-362
References: http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0079.html; http://bugs.exim.org/show_bug.cgi?id=988; http://lists.exim.org/lurker/message/20[PII_REDACTED]25.9a69f755.en.html
CVE: CVE-2010-2024
Published: 2010-06-07
Description: transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to change permissions of arbitrary files or create arbitrary files, and cause a denial of service or possibly gain privileges, via a symlink attack on a lockfile in /tmp/.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-362
References: http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0079.html; http://bugs.exim.org/show_bug.cgi?id=989; http://lists.exim.org/lurker/message/20[PII_REDACTED]25.9a69f755.en.html
CVE: CVE-2010-2157
Published: 2010-06-07
Description: Unspecified vulnerability in CA ARCserve Backup r11.5 SP4, r12.0 SP2, and r12.5 SP1 on Windows allows local users to obtain sensitive information via unknown vectors.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/40037; http://www.securityfocus.com/archive/1/511656/100/0/threaded; http://www.securityfocus.com/bid/40566
CVE: CVE-2010-2158
Published: 2010-06-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Storm module 5.x and 6.x before 6.x-1.33 for Drupal allow remote authenticated users, with certain module privileges, to inject arbitrary web script or HTML via the (1) fullname, (2) phone, or (3) im parameter in a stormperson action to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 2.1 (LOW)
CWE: CWE-79
References: http://drupal.org/node/803770; http://secunia.com/advisories/39732; http://drupal.org/node/803770
CVE: CVE-2010-2052
Published: 2010-06-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-2155.  Reason: This candidate is a duplicate of CVE-2010-2155.  Notes: All CVE users should reference CVE-2010-2155 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2010-2053
Published: 2010-06-07
Description: emesenelib/ProfileManager.py in emesene before 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on the emsnpic temporary file.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://forum.emesene.org/index.php?topic=3441.0; http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042683.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042699.html
CVE: CVE-2010-2058
Published: 2010-06-07
Description: setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable permissions, which allows local users to obtain the SQL database password.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://secunia.com/advisories/42820; http://security.gentoo.org/glsa/glsa-201101-07.xml; http://www.openwall.com/lists/oss-security/2010/06/01/13
CVE: CVE-2010-2156
Published: 2010-06-07
Description: ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://ftp.isc.org/isc/dhcp/dhcp-4.0.2-P1-RELNOTES; http://ftp.isc.org/isc/dhcp/dhcp-4.1.1-P1-RELNOTES; http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042843.html
CVE: CVE-2010-1636
Published: 2010-06-08
Description: The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information from a write-only file descriptor.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=5dc6416414fb3ec6e2825fd4d20c8bf1d7fe0395; http://www.openwall.com/lists/oss-security/2010/05/18/10; http://www.openwall.com/lists/oss-security/2010/05/18/2
CVE: CVE-2010-1647
Published: 2010-06-08
Description: Cross-site scripting (XSS) vulnerability in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to inject arbitrary web script or HTML via crafted Cascading Style Sheets (CSS) strings that are processed as script by Internet Explorer.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043803.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043856.html; http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-May/000091.html
CVE: CVE-2010-1648
Published: 2010-06-08
Description: Cross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to hijack the authentication of users for requests that (1) create accounts or (2) reset passwords, related to the Special:Userlogin form.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043803.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043856.html; http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-May/000091.html
CVE: CVE-2010-1649
Published: 2010-06-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in the back end in Joomla! 1.5 through 1.5.17 allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "various administrator screens," possibly the search parameter in administrator/index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://developer.joomla.org/security/news/[PII_REDACTED]1-core-xss-vulnerabilities-in-back-end.html?utm_source=feedburner&utm_medium=email&utm_campaign=Feed%3A+JoomlaSecurityNews+%28Joomla%21+Security+News%29; http://secunia.com/advisories/39964; http://www.osvdb.org/65011
CVE: CVE-2010-1848
Published: 2010-06-08
Description: Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. (dot dot) in a table name.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://bugs.mysql.com/bug.php?id=53371; http://dev.mysql.com/doc/refman/5.0/en/news-5-0-91.html; http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
CVE: CVE-2010-1849
Published: 2010-06-08
Description: The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a large number of packets that exceed the maximum length.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.mysql.com/bug.php?id=50974; http://dev.mysql.com/doc/refman/5.0/en/news-5-0-91.html; http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
CVE: CVE-2010-1850
Published: 2010-06-08
Description: Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIELD_LIST command with a long table name.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-119
References: http://bugs.mysql.com/bug.php?id=53237; http://dev.mysql.com/doc/refman/5.0/en/news-5-0-91.html; http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
CVE: CVE-2010-2060
Published: 2010-06-08
Description: The put command functionality in beanstalkd 1.4.5 and earlier allows remote attackers to execute arbitrary Beanstalk commands via the body in a job that is too big, which is not properly handled by the dispatch_cmd function in prot.c.
CVSS Score: 7.5 (HIGH)
References: http://github.com/kr/beanstalkd/commit/2e8e8c6387ecdf5923dfc4d7718d18eba1b0873d; http://kr.github.com/beanstalkd/2010/05/23/1.4.6-release-notes.html; http://osvdb.org/65113
CVE: CVE-2010-2159
Published: 2010-06-08
Description: Dameng DM Database Server allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors related to the SP_DEL_BAK_EXPIRED procedure in wdm_dll.dll, which triggers memory corruption.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/archive/1/511559/100/0/threaded; http://www.securityfocus.com/bid/40460; https://exchange.xforce.ibmcloud.com/vulnerabilities/59081
CVE: CVE-2010-2190
Published: 2010-06-08
Description: The (1) trim, (2) ltrim, (3) rtrim, and (4) substr_replace functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2507&w=2
CVE: CVE-2010-2191
Published: 2010-06-08
Description: The (1) parse_str, (2) preg_match, (3) unpack, and (4) pack functions; the (5) ZEND_FETCH_RW, (6) ZEND_CONCAT, and (7) ZEND_ASSIGN_CONCAT opcodes; and the (8) ArrayObject::uasort method in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) or trigger memory corruption by causing a userspace interruption of an internal function or handler.  NOTE: vectors 2 through 4 are related to the call time pass by reference feature.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2507&w=2
CVE: CVE-2004-2768
Published: 2010-06-08
Description: dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid file, (2) setgid file, or (3) device, a related issue to CVE-2010-2059.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://lists.jammed.com/ISN/2003/12/0056.html; http://www.hackinglinuxexposed.com/articles/20031214.html; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=225692
CVE: CVE-2005-4889
Published: 2010-06-08
Description: lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package removal, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid or (2) setgid file, a related issue to CVE-2010-2059.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://distrib-coffee.ipsl.jussieu.fr/pub/mirrors/rpm/files/rpm/rpm-4.4/rpm-4.4.3.tar.gz; http://www.mandriva.com/security/advisories?name=MDVSA-2010:180; https://bugzilla.redhat.com/show_bug.cgi?id=125517
CVE: CVE-2010-1297
Published: 2010-06-08
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://blog.zynamics.com/2010/06/09/analyzing-the-currently-exploited-0-day-for-adobe-reader-and-adobe-flash/; http://community.websense.com/blogs/securitylabs/archive/2010/06/09/having-fun-with-adobe-0-day-exploits.aspx; http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751
CVE: CVE-2010-2059
Published: 2010-06-08
Description: lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM before 4.4.3, does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid or (2) setgid file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://distrib-coffee.ipsl.jussieu.fr/pub/mirrors/rpm/files/rpm/rpm-4.4/rpm-4.4.3.tar.gz; http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
CVE: CVE-2010-2197
Published: 2010-06-08
Description: rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove home directories via vectors involving a ;~ (semicolon tilde) sequence in a Name tag.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: https://bugzilla.redhat.com/show_bug.cgi?id=125517; https://exchange.xforce.ibmcloud.com/vulnerabilities/59423; https://bugzilla.redhat.com/show_bug.cgi?id=125517
CVE: CVE-2010-2198
Published: 2010-06-08
Description: lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to gain privileges or bypass intended access restrictions by creating a hard link to a vulnerable file that has (1) POSIX file capabilities or (2) SELinux context information, a related issue to CVE-2010-2059.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://marc.info/?l=oss-security&m=[PII_REDACTED]8131&w=2; http://rpm.org/gitweb?p=rpm.git%3Ba=commit%3Bh=4d172a194addc49851e558ea390d3045894e3230; http://secunia.com/advisories/40028
CVE: CVE-2010-2199
Published: 2010-06-08
Description: lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to bypass intended access restrictions by creating a hard link to a vulnerable file that has a POSIX ACL, a related issue to CVE-2010-2059.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: https://bugzilla.redhat.com/show_bug.cgi?id=125517; https://exchange.xforce.ibmcloud.com/vulnerabilities/59416; https://bugzilla.redhat.com/show_bug.cgi?id=125517
CVE: CVE-2010-0819
Published: 2010-06-08
Description: Unspecified vulnerability in the Windows OpenType Compact Font Format (CFF) driver in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users to execute arbitrary code via unknown vectors related to improper validation when copying data from user mode to kernel mode, aka "OpenType CFF Font Driver Memory Corruption Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/40572; http://www.us-cert.gov/cas/techalerts/TA10-159B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-037
CVE: CVE-2010-0821
Published: 2010-06-08
Description: Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via an Excel file with a crafted SxView record, related to improper validation of unspecified structures, aka "Excel Record Parsing Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0824 and CVE-2010-1245.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/archive/1/511729/100/0/threaded; http://www.us-cert.gov/cas/techalerts/TA10-159B.html; http://www.zerodayinitiative.com/advisories/ZDI-10-104
CVE: CVE-2010-0822
Published: 2010-06-08
Description: Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted OBJ (0x5D) record, aka "Excel Object Stack Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://osvdb.org/65236; http://www.securityfocus.com/archive/1/511752/100/0/threaded; http://www.securityfocus.com/bid/40520
CVE: CVE-2010-0823
Published: 2010-06-08
Description: Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-1247 and CVE-2010-1249.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://osvdb.org/65233; http://www.us-cert.gov/cas/techalerts/TA10-159B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038
CVE: CVE-2010-0824
Published: 2010-06-08
Description: Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed WOPT (0x80B) record, aka "Excel Record Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0821 and CVE-2010-1245.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/archive/1/511760/100/0/threaded; http://www.securityfocus.com/bid/40522; http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE: CVE-2010-1245
Published: 2010-06-08
Description: Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed SxView (0xB0) record, aka "Excel Record Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0824 and CVE-2010-0821.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/archive/1/511753/100/0/threaded; http://www.us-cert.gov/cas/techalerts/TA10-159B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038
CVE: CVE-2010-1246
Published: 2010-06-08
Description: Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record, aka "Excel RTD Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/archive/1/511755/100/0/threaded; http://www.us-cert.gov/cas/techalerts/TA10-159B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038
CVE: CVE-2010-1247
Published: 2010-06-08
Description: Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record that triggers heap corruption, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1249.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://osvdb.org/65237; http://www.securityfocus.com/archive/1/511754/100/0/threaded; http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE: CVE-2010-1248
Published: 2010-06-08
Description: Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed HFPicture (0x866) record, aka "Excel HFPicture Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://osvdb.org/65235; http://www.securityfocus.com/archive/1/511765/100/0/threaded; http://www.securityfocus.com/bid/40526
CVE: CVE-2010-1249
Published: 2010-06-08
Description: Buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed ExternName (0x23) record, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1247.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://osvdb.org/65232; http://www.securityfocus.com/archive/1/511767/100/0/threaded; http://www.securityfocus.com/bid/40527
CVE: CVE-2010-1250
Published: 2010-06-08
Description: Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with malformed (1) EDG (0x88) and (2) Publisher (0x89) records, aka "Excel EDG Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/archive/1/511756/100/0/threaded; http://www.securityfocus.com/bid/40528; http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE: CVE-2010-1251
Published: 2010-06-08
Description: Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel Record Stack Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/40529; http://www.us-cert.gov/cas/techalerts/TA10-159B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038
CVE: CVE-2010-1252
Published: 2010-06-08
Description: Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel String Variable Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/40530; http://www.us-cert.gov/cas/techalerts/TA10-159B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038
CVE: CVE-2010-1253
Published: 2010-06-08
Description: Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via an Excel file with crafted DBQueryExt records that allow a function call to a "user-controlled pointer," aka "Excel ADO Object Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://osvdb.org/65228; http://www.securityfocus.com/archive/1/511728/100/0/threaded; http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE: CVE-2010-1254
Published: 2010-06-08
Description: The installation for Microsoft Open XML File Format Converter for Mac sets insecure ACLs for the /Applications folder, which allows local users to execute arbitrary code by replacing the executable with a Trojan Horse, aka "Mac Office Open XML Permissions Vulnerability."
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/40533; http://www.us-cert.gov/cas/techalerts/TA10-159B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038