Oval Definition:oval:org.mitre.oval:def:7196
Revision Date:2014-06-30Version:23
Title:Real Time Data Array Record Vulnerability
Description:Microsoft Excel 2002 SP3 and 2007 SP2; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Real Time Data Array Record Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2010-3240
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft Excel 2002
Microsoft Excel 2007
Microsoft Office Compatibility Pack
Microsoft Office Excel Viewer
Definition Synopsis
  • Vulnerable Excel 2002
  • Microsoft Excel 2002 is installed
  • AND Excel.exe version is less than 10.0.6866.0
  • OR Vulnerable Excel 2007
  • Microsoft Excel 2007 is installed
  • AND Excel.exe version is less than 12.0.6545.5000
  • OR Vulnerable Excel Viewer 2007
  • Microsoft Excel Viewer 2007 is installed
  • AND Xlview.exe version is less than 12.0.6545.5000
  • OR Vulnerable Compatibility Pack, Office 2007
  • Compatibility Pack, Office 2007
  • Microsoft Office Compatibility Pack is installed
  • OR Microsoft Office 2007 is installed
  • AND Excelcnv.exe version is less than 12.0.6545.5000
  • BACK