CVE-2010-0252: Code Injection
The Microsoft Data Analyzer ActiveX control (aka the Office Excel ActiveX control for Data Analysis) in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted web page that corrupts the "system state," aka "Microsoft Data Analyzer ActiveX Control Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0252?
CVE-2010-0252 has been rated as critical due to the potential for remote code execution.
How do I fix CVE-2010-0252?
To fix CVE-2010-0252, apply the latest security updates and patches provided by Microsoft for the affected systems.
Which operating systems are affected by CVE-2010-0252?
CVE-2010-0252 affects Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, and several versions of Windows Vista, 7, and Server 2008.
Is there a workaround for CVE-2010-0252?
A potential workaround for CVE-2010-0252 includes disabling the Microsoft Data Analyzer ActiveX control if it is not needed.
What attacks can be executed due to CVE-2010-0252?
CVE-2010-0252 allows attackers to execute arbitrary code on a victim's machine, potentially compromising system security.