CVE-2012-0185

CRITICAL 9.3CVE-2012-0185 · Published 09/05/2012 · updated 16/06/2026

Package	Affected versions	Patched versions
excel microsoft	`= 2007= 2010`	No fix yet

Description

Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening, aka "Excel MergeCells Record Heap Overflow Vulnerability."

References

secunia.com/advisories/49112
securitytracker.com/id
us-cert.gov/cas/techalerts/TA12-129A.html · US Government Resource
docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-030
exchange.xforce.ibmcloud.com/vulnerabilities/75118
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14738

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free