Unscored severity · published Feb 10, 2011
CVE-2011-0978
Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and…
–
CVSS
42.6%
EPSS
No
On KEV
Description
Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via vectors related to an axis properties record, and improper incrementing of an array index, aka "Excel Array Indexing Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)42.6% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Microsoft
2004 · source: NVD
EX
Excel · Microsoft
2002; 2003; 2007 · source: NVD
EV
Excel Viewer · Microsoft
All versions, or not specified · source: NVD
OC
Office Compatibility Pack · Microsoft
2007 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0978
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0978
dvlabs.tippingpoint.com
http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft
secunia.com
http://secunia.com/advisories/39122
secunia.com
http://secunia.com/advisories/43232
securityreason.com
http://securityreason.com/securityalert/8231
www.securitytracker.com
http://www.securitytracker.com/id?1025337
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA11-102A.html
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability