CVE-2011-0105
EXPLOITEDMS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow
Title source: metasploitExploitation Summary
CVE-2011-0105 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 2 public exploits from researchers including Metasploit, Aniway, Unknown, sinn3r, juan vazquez, including a Metasploit module exploits/windows/fileformat/ms11_021_xlb_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Microsoft Office Excel 2007 via a malformed .xlb file, allowing arbitrary code execution by controlling a memcpy operation. It includes specific return addresses for different Excel 2007 versions on Windows XP.
Description
Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data Initialization Vulnerability."
Exploits (2)
This Metasploit module exploits a stack-based buffer overflow in Microsoft Office Excel 2007 via a malformed .xlb file, allowing arbitrary code execution by controlling a memcpy operation. It includes specific return addresses for different Excel 2007 versions on Windows XP.
This Metasploit module exploits a stack-based buffer overflow in Microsoft Office Excel 2007 via a malformed .xlb file, allowing arbitrary code execution by controlling a memcpy operation.