Published: 08/06/2010 Updated: 12/10/2018

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 945

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote malicious users to execute arbitrary code via an Excel file with a crafted OBJ (0x5D) record, aka "Excel Object Stack Overflow Vulnerability."

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft excel 2002
microsoft office 2004
microsoft office 2008
microsoft open xml file format converter

## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = NormalRanking inclu ...

''' __ __ ____ _ _ ____ | \/ |/ __ \ /\ | | | | _ \ | \ / | | | | / \ | | | | |_) | | |\/| | | | |/ /\ \| | | | _ < | | | | |__| / ____ \ |__| | |_) | |_| |_|\____/_/ \_\____/|____/ wwwexploit-dbcom/moaub-24-microsoft-excel-obj-record-stack-overflow/ githubcom/offensive-security/expl ...

#This is an exploit for MS10-038/CVE-2010-0822 #Everything is hardcoded! (winxp sp3) #webDEViL #w3bd3vil[at]gmail[dot]com #krashin/excel1xls #Office 2007 - 12045181014 #MS10-038 bulletin states that Office 2007 is not vulnerable, lol import binascii wD="d0cf11e0a1b11ae1000000000000000000000000000000003e000300feff0900060000" wD+="0000 ...

This Metasploit module exploits a vulnerability found in Excel 2002 of Microsoft Office XP By supplying a xls file with a malformed OBJ (recType 0x5D) record an attacker can get the control of the execution flow This results arbitrary code execution under the context of the user ...

Microsoft Excel 0x5D record stack overflow exploit ...

Month Of Abysssec Undisclosed Bugs - Microsoft Excel suffers an OBJ record stack overflow vulnerability ...

CWE-94 http://osvdb.org/65236 http://www.us-cert.gov/cas/techalerts/TA10-159B.html http://www.securityfocus.com/bid/40520 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7265 http://www.securityfocus.com/archive/1/511752/100/0/threaded https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038 https://nvd.nist.gov https://www.exploit-db.com/exploits/18143/

CVE-2010-0822

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect