First published: Wed Oct 13 2010(Updated: )
Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel Record Parsing Memory Corruption Vulnerability."
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Open XML File Format Converter | ||
Microsoft Office | =2008 | |
Microsoft Office | =2004 | |
Microsoft Office Excel | =2002-sp3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-3231 is rated as critical due to its potential to allow remote code execution.
To fix CVE-2010-3231, users should apply the patch provided by Microsoft in the security update MS10-080.
CVE-2010-3231 affects Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac.
Yes, CVE-2010-3231 can allow remote attackers to execute arbitrary code, potentially leading to unauthorized access.
While applying the official patch is the recommended solution, disabling macros in Excel documents can serve as a temporary workaround until the patch is implemented.