CVE-2010-1253: Code Injection
Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via an Excel file with crafted DBQueryExt records that allow a function call to a "user-controlled pointer," aka "Excel ADO Object Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1253?
CVE-2010-1253 has a critical severity rating due to the potential for remote code execution.
How do I fix CVE-2010-1253?
To fix CVE-2010-1253, users should apply the latest patches and updates provided by Microsoft for the affected Office versions.
What software is affected by CVE-2010-1253?
CVE-2010-1253 affects Microsoft Excel 2002 SP3, 2007 SP1 and SP2, Office 2004 for Mac, Office 2008 for Mac, and related compatibility packs.
What type of attack does CVE-2010-1253 facilitate?
CVE-2010-1253 facilitates remote attackers to execute arbitrary code through specially crafted Excel files.
Is there a workaround for CVE-2010-1253?
While updating software is the best mitigation for CVE-2010-1253, users can also avoid opening untrusted Excel files to reduce risk.