CVE-2010-3233: Input Validation
Published Oct 13, 2010
·Updated
Microsoft Excel 2002 SP3 and 2003 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted .wk3 (aka Lotus 1-2-3 workbook) file, aka "Lotus 1-2-3 Workbook Parsing Vulnerability."
Affected Software
2 affected components
Microsoft Excel=2002-sp3
Microsoft Excel=2003-sp3
Event History
Oct 13, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3233?
CVE-2010-3233 is rated as critical due to its potential to allow remote code execution.
2
How do I fix CVE-2010-3233?
To fix CVE-2010-3233, you need to apply the relevant security update provided by Microsoft.
3
Can CVE-2010-3233 be exploited remotely?
Yes, CVE-2010-3233 can be exploited remotely through a specially crafted .wk3 file.
4
Which versions of Microsoft Excel are affected by CVE-2010-3233?
CVE-2010-3233 affects Microsoft Excel 2002 SP3 and Microsoft Excel 2003 SP3.
5
What type of attack does CVE-2010-3233 facilitate?
CVE-2010-3233 facilitates arbitrary code execution attacks through vulnerable file parsing.