Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
CVE-2011-0978
CVE information
Published
Last Modified
CVSSv2.0 Severity
Impact Analysis
Description
Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via vectors related to an axis properties record, and improper incrementing of an array index, aka "Excel Array Indexing Vulnerability.".
CVSSv2.0 Score
- Severity
- High
- Base Score
- 9.3/10
- Exploit Score
- 8.6/10
- Access Vector
- Network
- Access Complexity
- Medium
- Authentication Required
- None
- Impact Score
- 10/10
- Confidentiality Impact
- Complete
- Availability Impact
- Complete
- Integrity Impact
- Complete
Products Affected
CPE | Affected | Vulnerable | Excluding | Edit |
---|---|---|---|---|
cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:microsoft:excel_viewer:-:sp2:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:* |
Yes
|
- | - |
References
- http://zerodayinitiative.com/advisories/ZDI-11-042/
- http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft
- http://secunia.com/advisories/43232
- http://www.securitytracker.com/id?1025337
- http://www.vupen.com/english/advisories/2011/0940
- http://secunia.com/advisories/39122
- http://securityreason.com/securityalert/8231
- http://www.us-cert.gov/cas/techalerts/TA11-102A.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-021