Description
Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; Excel Services on Office SharePoint Server 2007 SP2; Excel Services on Office SharePoint Server 2010 Gold and SP1; and Excel Web App 2010 Gold and SP1 do not properly parse conditional expressions associated with formatting requirements, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Conditional Expression Parsing Vulnerability."
Remediation
References
Related Vulnerabilities
WebLogic Improper Certificate Validation Vulnerability (CVE-2020-9488)
WordPress Plugin AddToAny Share Buttons Cross-Site Scripting (1.6.6)
WordPress Plugin Gallery-Video Gallery and Youtube Gallery Multiple Vulnerabilities (2.0.3)
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.7)
WordPress Plugin Post to CSV by BestWebSoft Cross-Site Scripting (1.3.0)