CVE-2011-1273

Microsoft Excel 2002/2003/2007/2010, Office 2004/2008/2011 for Mac - RCE via Crafted Spreadsheet

Title source: llm
STIX 2.1

Description

Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Improper Record Parsing Vulnerability."

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/72921
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12354
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44931/

Scores

EPSS 0.1697
EPSS Percentile 96.7%

Details

CWE
CWE-119
Status published
Products (10)
microsoft/excel 2002 sp3
microsoft/excel 2003 sp3
microsoft/excel 2007 sp2
microsoft/excel 2010 (2 CPE variants)
microsoft/excel_viewer
microsoft/office 2004
microsoft/office 2008
microsoft/office 2011
microsoft/office_compatibility_pack 2007 sp2
microsoft/open_xml_file_format_converter
Published Jun 16, 2011
Tracked Since Feb 18, 2026