CVE-2011-0104

Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary…

published April 13, 2011

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
53%
Percentile
99.0
In the wild
Unconfirmed
What it is

⚠️ A crafted HLink record in an Excel file could let attackers run arbitrary code — who knew spreadsheets could be so sneaky? 🔥 Think of it like a restaurant menu that allows anyone to add their own dishes secretly — if the kitchen isn’t careful, they might end up cooking something dangerous instead of your favorite meal! This vulnerability could lead to an attacker executing code that might corrupt memory or crash the application. In worse scenarios, it could allow them to take control of your system, creating chaos while you’re just trying to get some work done!

Put simply

Think of it like a restaurant menu that allows anyone to add their own dishes secretly — if the kitchen isn’t careful, they might end up cooking something dangerous instead of your favorite meal! The Excel Buffer Overwrite Vulnerability exists due to improper handling of HLink records in specific Excel versions, which can be exploited by an attacker through a specially crafted Excel file.

What to do

This vulnerability could lead to an attacker executing code that might corrupt memory or crash the application. In worse scenarios, it could allow them to take control of your system, creating chaos while you’re just trying to get some work done! To mitigate this issue, upgrade to the latest versions of Excel and apply any available patches. Additionally, avoid opening Excel files from untrusted sources to reduce the risk of exploitation. You've got this! With the right updates in place, you can keep your Excel environment safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.53431 · 99.0th percentile
Published
2011-04-13T18:00Z
EPSS history
Timeline
  • 13 APR 18:00Z
    Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary…
    cvelistv5