CVE-2011-0104

Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HLink record in an Excel file, aka "Excel Buffer Overwrite Vulnerability."

Affected products

Office Excel, Office, Open Xml File Format Converter For Mac

Microsoft Excel

= 2002, 2003

Microsoft Office

= 2004, 2008

Microsoft Open Xml File Format Converter

All versions

CVSS 2.0

9.3 HIGH

EPSS

53.4% (99th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2011-04-13