CVE-2010-1249

no score yetEPSS 25%

Buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed ExternName (0x23) record, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1247.

EPSS: 25% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2010-06-08
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:excel
microsoft:office
microsoft:open_xml_file_format_converter

References

http://osvdb.org/65232
http://www.securityfocus.com/archive/1/511767/100/0/threaded
http://www.securityfocus.com/bid/40527
http://www.us-cert.gov/cas/techalerts/TA10-159B.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038

Check your stack JSON