Oval Definition:oval:org.mitre.oval:def:7240
Revision Date:2014-06-30Version:22
Title:Excel Memory Corruption Vulnerability
Description:Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-1247 and CVE-2010-1249.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2010-0823
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft Excel 2002
Microsoft Excel 2003
Microsoft Excel 2007
Microsoft Office Compatibility Pack
Microsoft Office Excel Viewer
Definition Synopsis
  • Vulnerable Excel 2002
  • Microsoft Excel 2002 is installed
  • AND Excel.exe version is less than 10.0.6862.0
  • OR Vulnerable Excel 2003
  • Microsoft Excel 2003 is installed
  • AND Excel.exe version is less than 11.0.8324.0
  • OR Vulnerable Excel 2007
  • Microsoft Excel 2007 is installed
  • AND Excel.exe version is less than 12.0.6535.5002
  • OR Vulnerable Excel Viewer 2007
  • Microsoft Excel Viewer 2007 is installed
  • AND Xlview.exe version is less than 12.0.6535.5000
  • OR Vulnerable Compatibility Pack, Office 2007
  • Check for Office 2007 or Compatibility Pack
  • Microsoft Office Compatibility Pack is installed
  • OR Microsoft Office 2007 is installed
  • AND Excelcnv.exe version is less than 12.0.6535.5000
  • BACK