Lucene search

CVE-2011-0098

🗓️ 13 Apr 2011 18:01:55Reported by microsoftType

"Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via an XLS file with a large record size, aka 'Excel Heap Overflow Vulnerability.'

Reporter	Title	Published	Views	Family All 12
Check Point Advisories	Microsoft Office Excel Label Record Buffer Overflow (MS11-021) - Ver2 (CVE-2011-0098)	16 Apr 201400:00	–	checkpoint_advisories
Check Point Advisories	Workaround for Multiple Microsoft Office Excel BIFF4, BIFF5, and BIFF6 Records Vulnerabilities (MS11-021)	12 Apr 201100:00	–	checkpoint_advisories
NVD	CVE-2011-0098	13 Apr 201118:55	–	nvd
Symantec	Microsoft Excel CVE-2011-0098 Heap Based Buffer Overflow Vulnerability	12 Apr 201100:00	–	symantec
seebug.org	Microsoft Excel堆缓冲区溢出漏洞(MS11-021)	15 Apr 201100:00	–	seebug
Prion	Integer overflow	13 Apr 201118:55	–	prion
Cvelist	CVE-2011-0098	13 Apr 201118:00	–	cvelist
Tenable Nessus	MS11-021: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2489279)	13 Apr 201100:00	–	nessus
Tenable Nessus	MS11-021 / MS11-022 / MS11-023: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2489279 / 2489283 / 2489293) (Mac OS X)	13 Apr 201100:00	–	nessus
OpenVAS	Microsoft Office Excel Remote Code Execution Vulnerabilities (2489279)	13 Apr 201100:00	–	openvas

Nvd

Node

microsoft excelMatch--x64

microsoft excelMatch2002sp3

microsoft excelMatch2003sp3

microsoft excelMatch2007sp2

microsoft excelMatch2010

microsoft excel_viewerMatch-sp2

microsoft officeMatch2004mac

microsoft officeMatch2008mac

microsoft office_compatibility_packMatch2007sp2

microsoft open_xml_file_format_convertermac

Source	Link
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-021
secunia	www.secunia.com/secunia_research/2011-32/
vupen	www.vupen.com/english/advisories/2011/0940
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12034
securityfocus	www.securityfocus.com/bid/47235
us-cert	www.us-cert.gov/cas/techalerts/TA11-102A.html
securitytracker	www.securitytracker.com/id
secunia	www.secunia.com/advisories/39122
osvdb	www.osvdb.org/71759

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Apr 2011 18:55Current

7.6High risk

Vulners AI Score7.6

CVSS29.3

EPSS0.963

CWE-189