GCVE - cpe:2.3:a:microsoft:office:2010:sp1:x86:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:office:2010:sp1:x86:*:*:*:*:*

part: a version: 2010 update: sp1

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Office (`500dd0f0-abf7-5a48-83ed-09faf7777559`)
Edition	x86
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-2730`	vulnerable	2026-06-08 05:05:29.702860	Details available The XML parser in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013, and Office for Mac 2011, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory consumption and persistent application hang) via a crafted XML document containing a large number of nested entity references, as demonstrated by a crafted text/plain e-mail message to Outlook, a similar issue to CVE-2003-1564. Published: 2014-04-05T14:00:00.000Z Updated: 2024-08-06T10:21:36.079Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/531722/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1809`	vulnerable	2026-06-08 05:05:26.355708	Details available The MSCOMCTL library in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1 makes it easier for remote attackers to bypass the ASLR protection mechanism via a crafted web site, as exploited in the wild in May 2014, aka "MSCOMCTL ASLR Vulnerability." Published: 2014-05-14T10:00:00.000Z Updated: 2024-08-06T09:50:11.352Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-024	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1756`	vulnerable	2026-06-08 05:05:26.281825	Details available Untrusted search path vulnerability in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1, when the Simplified Chinese Proofing Tool is enabled, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Microsoft Office Chinese Grammar Checking Vulnerability." Published: 2014-05-14T10:00:00.000Z Updated: 2024-08-06T09:50:11.140Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-023	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5057`	vulnerable	2026-06-08 05:04:50.725094	Details available hxds.dll in Microsoft Office 2007 SP3 and 2010 SP1 and SP2 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted COM component on a web site that is visited with Internet Explorer, as exploited in the wild in December 2013, aka "HXDS ASLR Vulnerability." Published: 2013-12-11T00:00:00.000Z Updated: 2024-08-06T16:59:41.315Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-106 http://blogs.technet.com/b/srd/archive/2013/12/09/ms13-106-another-aslr-bypass-is-gone.aspx	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3889`	vulnerable	2026-06-08 05:04:33.080981	Details available Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; Office Compatibility Pack SP3; and Excel Services and Word Automation Services in SharePoint Server 2013 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Excel Memory Corruption Vulnerability." Published: 2013-10-09T14:44:00.000Z Updated: 2024-08-06T16:22:01.366Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-084 http://www.us-cert.gov/ncas/alerts/TA13-288A https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19132 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-085 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18901	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3859`	vulnerable	2026-06-08 05:04:33.038026	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3129`	vulnerable	2026-06-08 05:04:30.204469	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1324`	vulnerable	2026-06-08 05:03:53.371389	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1856`	vulnerable	2026-06-08 05:00:51.165683	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1854`	vulnerable	2026-06-08 05:00:51.156265	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.