Lucene search

K
cve[email protected]CVE-2011-0098
HistoryApr 13, 2011 - 6:55 p.m.

CVE-2011-0098

2011-04-1318:55:01
CWE-189
web.nvd.nist.gov
46
cve-2011-0098
microsoft excel
remote code execution
integer signedness error
heap overflow
security vulnerability
nvd
office for mac
open xml
excel viewer
office compatibility pack

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via an XLS file with a large record size, aka β€œExcel Heap Overflow Vulnerability.”

CPE configuration

NVD
microsoftexcelMatch--x64
OR
microsoftexcelMatch2002sp3
OR
microsoftexcelMatch2003sp3
OR
microsoftexcelMatch2007sp2
OR
microsoftexcelMatch2010
OR
microsoftexcel_viewerMatch-sp2
OR
microsoftofficeMatch2004mac
OR
microsoftofficeMatch2008mac
OR
microsoftoffice_compatibility_packMatch2007sp2
OR
microsoftopen_xml_file_format_convertermac

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C