CVE-2012-0185: Buffer Overflow
First published: Wed May 09 2012(Updated: )
Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening, aka "Excel MergeCells Record Heap Overflow Vulnerability."
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Excel | =2007-sp2 | |
| Microsoft Excel | =2007-sp3 | |
| Microsoft Excel | =2010 | |
| Microsoft Excel | =2010-sp1 | |
| Microsoft Excel Viewer | ||
| Microsoft Office Compatibility Pack | =sp2 | |
| Microsoft Office Compatibility Pack | =sp3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/49112
- http://www.securitytracker.com/id?1027041
- http://www.us-cert.gov/cas/techalerts/TA12-129A.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-030
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75118
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14738
- agent/references
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/author
- agent/severity
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft excel
- version/microsoft excel/2007-sp2
- version/microsoft excel/2007-sp3
- version/microsoft excel/2010
- version/microsoft excel/2010-sp1
- canonical/microsoft excel viewer
- canonical/microsoft office compatibility pack
- version/microsoft office compatibility pack/sp2
- version/microsoft office compatibility pack/sp3