Microsoft Excel - Remote Buffer Overflow

🗓️ 12 Apr 2011 00:00:00Reported by Rodrigo Rubira BrancoType

Microsoft Excel buffer-overflow vulnerability via crafted fil

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2011-0104	12 Apr 201100:00	–	circl
Check Point Advisories	Microsoft Excel Crafted URL Unicode Buffer Overflow (MS06-050; CVE-2006-3086; CVE-2011-0104)	24 Feb 201100:00	–	checkpoint_advisories
Check Point Advisories	Preemptive Protection against Microsoft Office Excel HLink Record Remote Code Execution Vulnerability (MS11-021)	12 Apr 201100:00	–	checkpoint_advisories
CVE	CVE-2011-0104	13 Apr 201118:00	–	cve
Cvelist	CVE-2011-0104	13 Apr 201118:00	–	cvelist
Tenable Nessus	MS11-021 / MS11-022 / MS11-023: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2489279 / 2489283 / 2489293) (Mac OS X)	13 Apr 201100:00	–	nessus
Tenable Nessus	MS11-021: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2489279)	13 Apr 201100:00	–	nessus
NVD	CVE-2011-0104	13 Apr 201118:55	–	nvd
OpenVAS	Microsoft Office Excel Remote Code Execution Vulnerabilities (2489279)	13 Apr 201100:00	–	openvas
OpenVAS	Microsoft Office Excel Remote Code Execution Vulnerabilities (2489279)	13 Apr 201100:00	–	openvas

source: https://www.securityfocus.com/bid/47245/info

Microsoft Excel is prone to a buffer-overflow vulnerability.

Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel file.

Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will result in a denial-of-service condition.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/35573.zip

27 Dec 2014 00:00Current

5.2Medium risk

Vulners AI Score5.2

CVSS 29.3

EPSS0.53431