CVE-2011-0980 - Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office Art objects, which allows remote attackers to execute arbitrary code via vectors related to a function pointer, aka "Excel Dangling Pointer Vulnerability."

Back Back to CVE browser

HIGH

Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office Art objects, which allows remote attackers to execute arbitrary code via vectors related to a function pointer, aka "Excel Dangling Pointer Vulnerability."

Published Feb 10, 2011

9.3

HIGH

CVSS 2.0

EPSS 26.37%

Description

Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office Art objects, which allows remote attackers to execute arbitrary code via vectors related to a function pointer, aka "Excel Dangling Pointer Vulnerability."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (10)

http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft
x_refsource_MISC
http://secunia.com/advisories/39122
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/43210
third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id?1025337
vdb-entryx_refsource_SECTRACK
http://www.us-cert.gov/cas/techalerts/TA11-102A.html
third-party-advisoryx_refsource_CERTUS Government Resource
http://www.vupen.com/english/advisories/2011/0940
vdb-entryx_refsource_VUPEN
http://zerodayinitiative.com/advisories/ZDI-11-040/
x_refsource_MISC
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-021
vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-0992
Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12018
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft		x_refsource_MISC
http://secunia.com/advisories/39122		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/43210		third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id?1025337		vdb-entryx_refsource_SECTRACK
http://www.us-cert.gov/cas/techalerts/TA11-102A.html		third-party-advisoryx_refsource_CERTUS Government Resource
http://www.vupen.com/english/advisories/2011/0940		vdb-entryx_refsource_VUPEN
http://zerodayinitiative.com/advisories/ZDI-11-040/		x_refsource_MISC
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-021		vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-0992		Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12018		vdb-entrysignaturex_refsource_OVAL