CVE-2011-0103

Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted record information in an Excel file, aka "Excel Memory Corruption Vulnerability."

Score

CVSS 2.0 9.3 Critical

Status

Modified - secure@microsoft.com

Published

2011-04-13

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Excel (Microsoft)
• Office (Microsoft)
• Open Xml File Format Converter (Microsoft)

References

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=901
• http://osvdb.org/71760
• http://secunia.com/advisories/39122
• http://www.securityfocus.com/bid/47244
• http://www.securitytracker.com/id?1025337
• http://www.us-cert.gov/cas/techalerts/TA11-102A.html
• http://www.vupen.com/english/advisories/2011/0940
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-021
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12616