CVE-2010-3232: Input Validation
Microsoft Excel 2003 SP3 and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel File Format Parsing Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3232?
CVE-2010-3232 has a critical severity rating due to the potential for remote code execution.
How do I fix CVE-2010-3232?
To fix CVE-2010-3232, apply the latest security updates provided by Microsoft for affected Excel versions.
Which software is affected by CVE-2010-3232?
CVE-2010-3232 affects Microsoft Excel 2003 SP3, 2007 SP2, various versions of Microsoft Office for Mac, and the Excel Viewer SP2.
Can CVE-2010-3232 be exploited without user interaction?
Yes, CVE-2010-3232 can be exploited remotely without requiring user interaction.
What types of attacks can result from CVE-2010-3232?
CVE-2010-3232 allows attackers to execute arbitrary code on a vulnerable system through specially crafted Excel documents.