Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2011-0977

🗓️ 10 Feb 2011 19:00:01Reported by [email protected]Type 
nvd
 nvd🔗 web.nvd.nist.gov👁 18 Views

Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Check Point Advisories		Microsoft Office Excel Graphic Object Dereferencing (MS11-023; CVE-2011-0977)
12 Apr 201100:00
–checkpoint_advisories
Check Point Advisories		Microsoft Office Excel Graphic Object Dereferencing Code Execution - Ver2 (CVE-2011-0977)
16 Apr 201400:00
–checkpoint_advisories
CVE		CVE-2011-0977
10 Feb 201118:00
–cve
Cvelist		CVE-2011-0977
10 Feb 201118:00
–cvelist
Tenable Nessus		MS11-021 / MS11-022 / MS11-023: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2489279 / 2489283 / 2489293) (Mac OS X)
13 Apr 201100:00
–nessus
Tenable Nessus		MS11-023: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2489293)
13 Apr 201100:00
–nessus
OpenVAS		Microsoft Excel 2007 Office Drawing Layer RCE Vulnerability
23 Feb 201100:00
–openvas
OpenVAS		Microsoft Office Remote Code Execution Vulnerabilities (2489293)
13 Apr 201100:00
–openvas
OpenVAS		Microsoft Excel 2007 Office Drawing Layer Remote Code Execution Vulnerability
23 Feb 201100:00
–openvas
OpenVAS		Microsoft Office Remote Code Execution Vulnerabilities (2489293)
13 Apr 201100:00
–openvas
Rows per page
NVD
Node
microsoftexcelMatch2007

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
29 Apr 2026 01:13Current
7.5High risk
Vulners AI Score7.5
CVSS 29.3
EPSS0.62606
CWE-399
vulnerabilitymicrosoft officeremote attackersarbitrary codeshape datadrawing file formatmac
18