CVE-2010-0263

Related Files

Zero Day Initiative Advisory 10-025

Posted Mar 9, 2010

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 10-025 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists in the decompression of XLSX files. The XLSX file is a ZIP archive of the associated content making up the new Open XML Document. Due to the lack of validation on the ZIP header when decompressing certain XML elements it is possible to execute uninitialized memory. Successful exploitation can lead to remote code execution under the credentials of the currently logged in user.

tags | advisory, remote, arbitrary, code execution

advisories | CVE-2010-0263

SHA-256 | 1e660607e5dfc124dfdf68aab869103d377209e3444d29b0dbe23acd0c6e32ac

Download | Favorite | View