CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
99.1%
Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via vectors related to an axis properties record, and improper incrementing of an array index, aka βExcel Array Indexing Vulnerability.β
Vendor | Product | Version | CPE |
---|---|---|---|
microsoft | excel | 2002 | cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:* |
microsoft | excel | 2003 | cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:* |
microsoft | excel | 2007 | cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:* |
microsoft | excel_viewer | - | cpe:2.3:a:microsoft:excel_viewer:-:sp2:*:*:*:*:*:* |
microsoft | office | 2004 | cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:* |
microsoft | office_compatibility_pack | 2007 | cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:* |
dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft
secunia.com/advisories/39122
secunia.com/advisories/43232
securityreason.com/securityalert/8231
www.securitytracker.com/id?1025337
www.us-cert.gov/cas/techalerts/TA11-102A.html
www.vupen.com/english/advisories/2011/0940
zerodayinitiative.com/advisories/ZDI-11-042/
docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-021
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12439