CVE-2010-0252

CRITIQUE 9.3CVE-2010-0252 · Published 10/02/2010 · updated 16/06/2026

En bref

CVE-2010-0252 est une vulnérabilité CRITIQUE (CVSS 9.3).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 28.8%, plus élevée que 98.1% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

The Microsoft Data Analyzer ActiveX control (aka the Office Excel ActiveX control for Data Analysis) in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted web page that corrupts the "system state," aka "Microsoft Data Analyzer ActiveX Control Vulnerability."

References

secunia.com/advisories/38503 · Vendor Advisory
secunia.com/advisories/40059
us-cert.gov/cas/techalerts/TA10-040A.html · US Government Resource
us-cert.gov/cas/techalerts/TA10-159B.html · US Government Resource
docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-008
docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-034
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8424

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free