CVE-2011-1278

Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel WriteAV Vulnerability."

Affected products

Office Excel, Office 2004 For Mac

Microsoft Excel

= 2002

Microsoft Office

= 2004

CVSS 2.0

9.3 HIGH

EPSS

17.0% (97th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2011-06-16