Exploitation Summary
EIP tracks 2 public exploits for CVE-2011-0104. PoCs published by Rodrigo Rubira Branco, Sunqiz.
AI-analyzed exploit summary The provided text describes a buffer overflow vulnerability in Microsoft Excel (CVE-2011-0104) that can be exploited via a crafted Excel file to achieve arbitrary code execution or denial-of-service. No actual exploit code is present in the snippet.
Description
Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HLink record in an Excel file, aka "Excel Buffer Overwrite Vulnerability."
Exploits (2)
The provided text describes a buffer overflow vulnerability in Microsoft Excel (CVE-2011-0104) that can be exploited via a crafted Excel file to achieve arbitrary code execution or denial-of-service. No actual exploit code is present in the snippet.
This repository contains a functional exploit PoC for CVE-2011-0104, a stack overflow vulnerability in Microsoft Excel's TOOLBARDEF record handling. The Python script generates a malicious .xlb file that triggers the vulnerability, and the accompanying writeup provides detailed technical analysis, including root cause analysis and debugging steps.