CVE-2010-0262

Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers access of an uninitialized stack variable, aka "Microsoft Office Excel FNGROUPNAME Record Uninitialized Memory Vulnerability."

Date published : 2010-03-10

http://www.us-cert.gov/cas/techalerts/TA10-068A.html

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=860