CVE-2011-0105
Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data Initialization Vulnerability."
- Affected products
- Office Excel, Office, Open Xml File Format Converter For Mac
- Microsoft Excel
- = 2002
- Microsoft Office
- = 2004, 2008
- Microsoft Open Xml File Format Converter
- All versions
- CVSS 2.0
- 9.3 HIGH
- EPSS
- 70.2% (99th percentile)
- Weakness
- CWE-119
- NVD status
- Modified
- Published
- 2011-04-13
CVE-2011-0105 at NVD
10 known exploits for CVE-2011-0105
Proof-of-concept code and exploit modules indexed by Sploitus
MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow
MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow
MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow
Microsoft Excel 2007 - '.xlb' Local Buffer Overflow (MS11-021) (Metasploit)
MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow
Microsoft Excel Data Validation Record Parsing Overflow
Microsoft Excel Data Validation Record Parsing Overflow
Microsoft Excel Data Validation Record Parsing Overflow
Microsoft Excel Data Validation Record Parsing Overflow
Microsoft Excel数据验证记录解析缓冲区溢出漏洞(MS11-021)