CVE-2011-1272

Microsoft Excel 2002/2003/2007, Office 2004/2008 for Mac - RCE via Crafted Spreadsheet

Title source: llm
STIX 2.1

Description

Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record structures during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Insufficient Record Validation Vulnerability."

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/48157
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12139

Scores

EPSS 0.1759
EPSS Percentile 96.8%

Details

CWE
CWE-20
Status published
Products (8)
microsoft/excel 2002 sp3
microsoft/excel 2003 sp3
microsoft/excel 2007 sp2
microsoft/excel_viewer
microsoft/office 2004
microsoft/office 2008
microsoft/office_compatibility_pack 2007 sp2
microsoft/open_xml_file_format_converter
Published Jun 16, 2011
Tracked Since Feb 18, 2026