VULNERABILITY INTELLIGENCE

CVE-2010-1247

CVSS score9.3 HIGH
EPSS probability22.39%
CISA KEVNot currently listed
Published2010-06-08
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record that triggers heap corruption, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1249.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references