CVE-2010-0258 CVE-2010-0258

漏洞描述

Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that causes memory to be interpreted as a different object type than intended, aka "Microsoft Office Excel Sheet Object Type Confusion Vulnerability."

影响产品

微软公司Microsoft Excel查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017↗labs.idefense.comhttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=859↗oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8545↗www.us-cert.govhttp://www.us-cert.gov/cas/techalerts/TA10-068A.html↗www.securitytracker.comhttp://www.securitytracker.com/id?1023698↗

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2016-7262 CVE-2016-7262 Microsoft Excel	高危	7.8	85.2%	PoCEXP	2016/12/20
CVE-2015-0097RCE CVE-2015-0097 Microsoft Excel Microsoft PowerPoint Microsoft Word	严重	9.3	74.7%	PoCEXP	2015/03/11
CVE-2012-0143RCE CVE-2012-0143 Microsoft-Office-XML Microsoft Excel	严重	9.3	60.6%	PoCEXP	2012/05/09
CVE-2011-0105RCE CVE-2011-0105 Microsoft Excel	严重	9.3	89.4%	PoCEXP	2011/04/13
CVE-2011-0978RCE CVE-2011-0978 Microsoft Excel	严重	9.3	81.4%	PoCEXP	2011/02/10
CVE-2010-0822RCE CVE-2010-0822 Microsoft Excel	严重	9.3	80.4%	PoCEXP	2010/06/08

利用情报状态

漏洞描述

影响产品

修复建议

参考链接

同产品关联漏洞