Vulnerabilities > Microsoft > Critical

DATE CVE VULNERABILITY TITLE RISK
2010-10-13 CVE-2010-3236 Improper Input Validation vulnerability in Microsoft Excel, Office and Open XML File Format Converter
Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Out Of Bounds Array Vulnerability."
network
microsoft CWE-20
critical
9.3
2010-10-13 CVE-2010-3235 Improper Input Validation vulnerability in Microsoft Excel 2002
Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Biff Record Vulnerability."
network
microsoft CWE-20
critical
9.3
2010-10-13 CVE-2010-3234 Improper Input Validation vulnerability in Microsoft Excel 2002
Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Substream Memory Corruption Vulnerability."
network
microsoft CWE-20
critical
9.3
2010-10-13 CVE-2010-3233 Improper Input Validation vulnerability in Microsoft Excel 2002/2003
Microsoft Excel 2002 SP3 and 2003 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted .wk3 (aka Lotus 1-2-3 workbook) file, aka "Lotus 1-2-3 Workbook Parsing Vulnerability."
network
microsoft CWE-20
critical
9.3
2010-10-13 CVE-2010-3232 Improper Input Validation vulnerability in Microsoft products
Microsoft Excel 2003 SP3 and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel File Format Parsing Vulnerability."
network
microsoft CWE-20
critical
9.3
2010-10-13 CVE-2010-3231 Improper Input Validation vulnerability in Microsoft Excel, Office and Open XML File Format Converter
Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel Record Parsing Memory Corruption Vulnerability."
network
microsoft CWE-20
critical
9.3
2010-10-13 CVE-2010-3230 Numeric Errors vulnerability in Microsoft Excel 2002
Integer overflow in Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel document with crafted record information, aka "Excel Record Parsing Integer Overflow Vulnerability."
network
microsoft CWE-189
critical
9.3
2010-10-13 CVE-2010-3221 Code Injection vulnerability in Microsoft Office, Word and Word Viewer
Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Parsing Vulnerability."
network
microsoft CWE-94
critical
9.3
2010-10-13 CVE-2010-3220 Code Injection vulnerability in Microsoft Office and Word
Unspecified vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Parsing Vulnerability."
network
microsoft CWE-94
critical
9.3
2010-10-13 CVE-2010-3219 Code Injection vulnerability in Microsoft Word 2002
Array index vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Parsing Vulnerability."
network
microsoft CWE-94
critical
9.3