Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Out-of-Bounds Memory Write in Parsing Vulnerability."

The remote Mac OS X host is running a version of Microsoft Office that is affected by multiple remote code execution vulnerabilities.

If an attacker can trick a user on the affected host into opening a specially crafted Word, Excel, or Lotus 1-2-3 file, these issues could be leveraged to execute arbitrary code subject to the user's privileges.

The remote Windows host is running a version of Microsoft Excel or Excel Viewer that is affected by several vulnerabilities.

If an attacker can trick a user on the affected host into opening a specially crafted Excel file, they could leverage this issue to execute arbitrary code subject to the user's privileges.

ID	Name	Product	Family	Severity
50068	MS10-079 / MS10-080 : Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2293194 / 2293211) (Mac OS X)	Nessus	MacOS X Local Security Checks	high
49957	MS10-080: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2293211)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2010-3241

high

Tenable Plugins

high

high