CVE-2010-0822

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 70.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-06-08 · updated 2026-06-16
Weakness: CWE-94

Description

Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted OBJ (0x5D) record, aka "Excel Object Stack Overflow Vulnerability."

Affected products

Microsoft Excel 2013 Service Pack 1: 2002-sp3
Microsoft Office: 2004, 2008
Microsoft Open Xml File Format Converter: all versions

References

http://osvdb.org/65236
http://www.securityfocus.com/archive/1/511752/100/0/threaded
http://www.securityfocus.com/bid/40520
http://www.us-cert.gov/cas/techalerts/TA10-159B.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7265
http://osvdb.org/65236
http://www.securityfocus.com/archive/1/511752/100/0/threaded
http://www.securityfocus.com/bid/40520
http://www.us-cert.gov/cas/techalerts/TA10-159B.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7265

Get alerted when CVE-2010-0822 or the next vulnerability affects your stack