Intrusion PreventionMS.Excel.PivotTable.Cache.Data.Record.Memory.Corruption
Description
This indicates an attack attempt against a memory-corruption vulnerability in
Microsoft Office Excel.
The vulnerability is caused by an error due to lack of validation on the SXVI.iCache value during loading of BIFF 8 files. It allows a remote attacker to execute arbitrary code via sending a malicious .xls file.
Affected Products
Microsoft Office Excel 2002 Service Pack 3
Microsoft Office Excel 2003 Service Pack 3
Microsoft Office 2004 for Mac
Microsoft Office 2008 for Mac
Open XML File Format Converter for Mac
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Refer to the vendor's web site for suggested workaround.
http://www.microsoft.com/technet/security/Bulletin/ms10-057.mspx
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 24050 |
| Created | Aug 11, 2010 |
| Updated | May 04, 2022 |
| Risk |
|
| CVE ID | CVE-2010-2562 |
| Exploit Prediction Score | 96.99% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, MacOS |
| Affected App | MS_Office |