CVE-2011-0101 Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted RealTimeData record, related to a stTopic field, double-byte c...
HighCVSS 9.3
EPSS 30.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted RealTimeData record, related to a stTopic field, double-byte characters, and an incorrect pointer calculation, aka "Excel Record Parsing WriteAV Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft excel | = 2002-sp3 | No fix listed |
References
- 71766 vdb-entry
- 39122 third-party-advisory vendor-advisory
- 20110412 ZDI-11-120: Microsoft Office Excel RealTimeData Record Parsing Remote Code Execution Vulnerability mailing-list
- 47243 vdb-entry
- 1025337 vdb-entry
- TA11-102A third-party-advisory us-government-resource
- ADV-2011-0940 vdb-entry vendor-advisory
- www.zerodayinitiative.com
- MS11-021 vendor-advisory
- oval:org.mitre.oval:def:11676 signature vdb-entry