CVE-2011-0978
Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via vectors related to an axis properties record, and improper incrementing of an array index, aka "Excel Array Indexing Vulnerability."
- Affected products
- Excel Viewer, Office Excel, Office 2004 For Mac, Office Compatibility Pack
- Microsoft Excel
- = 2002, 2003, 2007
- Microsoft Excel Viewer
- All versions
- Microsoft Office
- = 2004
- Microsoft Office Compatibility Pack
- = 2007
- Fix
- Available
- CVSS 2.0
- 9.3 HIGH
- EPSS
- 42.6% (99th percentile)
- Weakness
- CWE-119
- NVD status
- Modified
- Published
- 2011-02-10
CVE-2011-0978 at NVD
5 known exploits for CVE-2011-0978
Proof-of-concept code and exploit modules indexed by Sploitus
Microsoft Excel Axis属性远程代码执行漏洞
Microsoft Office Excel Axis Properties Record Parsing Buffer Overflow
Microsoft Excel - Axis Properties Record Parsing Buffer Overflow (PoC) (MS11-02)
Microsoft Office Excel Buffer Overflow
Microsoft Excel - Axis Properties Record Parsing Buffer Overflow (PoC) (MS11-02)