CVE-2010-0822

Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows…

published June 8, 2010

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.4th percentile for exploit probability.

CVSS
—
EPSS
70%
Percentile
99.4
In the wild
Unconfirmed
What it is

⚠️ A crafty Excel file can cause a stack-based buffer overflow, letting attackers run their code and take charge of your system! 🦸‍♂️ Think of it like a restaurant where someone swaps out the chef's special recipe with a harmful one — if the kitchen doesn't check the ingredients first, they could be serving up something disastrous! 🏨 An attacker could exploit this vulnerability by tricking a user into opening a malicious Excel file, leading to arbitrary code execution. Imagine your system suddenly obeying commands from a stranger — that's essentially what could happen here!

Put simply

Think of it like a restaurant where someone swaps out the chef's special recipe with a harmful one — if the kitchen doesn't check the ingredients first, they could be serving up something disastrous! 🏨 This vulnerability in Microsoft Office Excel (including Office 2002 SP3 and various Mac versions) stems from how it processes crafted OBJ (0x5D) records, allowing attackers to manipulate the stack and execute their code.

What to do

An attacker could exploit this vulnerability by tricking a user into opening a malicious Excel file, leading to arbitrary code execution. Imagine your system suddenly obeying commands from a stranger — that's essentially what could happen here! To protect your systems, ensure you apply any available patches from Microsoft for these affected versions. If you're still using these versions, consider upgrading to a more recent version of Office that has these vulnerabilities addressed. 🛡️ You can tackle this! Stay vigilant, keep your software updated, and you'll be a security hero! 💪

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.70121 · 99.4th percentile
Published
2010-06-08T20:00Z
EPSS history
Timeline
  • 08 JUN 20:00Z
    Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows…
    cvelistv5