CVEvulnerability
CVE-2012-0185
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-05-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening, aka "Excel MergeCells Record Heap Overflow Vulnerability."
Affected configurations
• microsoft excel 2007
• microsoft excel 2010
• microsoft excel viewer
• microsoft office compatibility pack
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/49112 secunia.com
- http://www.securitytracker.com/id?1027041 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA12-129A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-030 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75118 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14738 oval.cisecurity.org
- http://secunia.com/advisories/49112 secunia.com
- http://www.securitytracker.com/id?1027041 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA12-129A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-030 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75118 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14738 oval.cisecurity.org