MS10-057: Vulnerability in Microsoft Office Excel Could Allow Remote Code Execution (2269707)

NASLDB: MS10-057: Vulnerability in Microsoft Office Excel Could Allow Remote Code Execution (2269707)

General

ID: 48294
Name: MS10-057: Vulnerability in Microsoft Office Excel Could Allow Remote Code Execution (2269707)

Summary: Checks version of Excel

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS Temporal Vector: CVSS2#E:POC/RL:OF/RC:C

Port: 139
Family: Windows : Microsoft Bulletins
Type: Local

Description

The remote host contains a version of Microsoft Office Excel 2002 or
2003 that is affected by a memory corruption vulnerability.

If an attacker can trick a user on the affected system into opening a
specially crafted Excel file using the affected application, he may be
able to leverage this issue to execute arbitrary code subject to the
user’s privileges.

Exploiting

Exploit Available: True
Exploitability Ease: Exploits are available

Sources

CVE: CVE-2010-2562
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: 2010/08/10
Patch Release: 2010/08/10
Plugin Release: 2010/08/11

Plugin

Version: 1.17
Filename: smb_nt_ms10-057.nasl
Filesize: 4018 bytes
MD5 Hash: f1cfe36d47a1362156863584f1e6c25b

Identification: Host/patch_management_checks
Require Keys: SMB/MS_Bulletin_Checks/Possible
Dependencies: "smb_nt_ms02-031.nasl", "office_installed.nasl", "smb_hotfixes.nasl", "ms_bulletin_checks_possible.nasl"

Ultimi plugins

Ultimi plugins

scip AG