CVSS: 9.3EPSS: 66%CPEs: 8EXPL: 1CVE-2011-1276 – Excel - SLYK Format Parsing Buffer Overrun (PoC)
https://notcve.org/view.php?id=CVE-2011-1276
16 Jun 2011 — Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Excel spreadsheet, related to improper validation of record information, aka "Excel Buffer Overrun Vulnerability." Desbordamiento de búfer en Microsoft Excel ... • https://www.exploit-db.com/exploits/17643 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 43%CPEs: 5EXPL: 0CVE-2011-1279
https://notcve.org/view.php?id=CVE-2011-1279
16 Jun 2011 — Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Out of Bounds WriteAV Vulnerability." Microsoft Excel 2002 SP3 y 2003 SP3; Office 2004 y 2008 para Mac, y Open XML File Format Converter para Mac no validan adecuadamente la i... • http://www.securityfocus.com/bid/48164 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 63%CPEs: 10EXPL: 0CVE-2011-0097
https://notcve.org/view.php?id=CVE-2011-0097
13 Apr 2011 — Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via a crafted 400h substream in an Excel file, which triggers a stack-based buffer overflow, aka "Excel Integer Overrun Vulnerability." Un desbordamiento de enteros en Excel 2002 SP3, 2003 SP3, 2007 SP2, y 2010; O... • http://osvdb.org/71758 • CWE-189: Numeric Errors •
CVSS: 9.3EPSS: 63%CPEs: 10EXPL: 0CVE-2011-0098
https://notcve.org/view.php?id=CVE-2011-0098
13 Apr 2011 — Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via an XLS file with a large record size, aka "Excel Heap Overflow Vulnerability." Un error en la propiedad signedness de un entero en Excel 2002 SP3, 2003 SP3, 2007 SP2, y 2010; Office 2004 y 2008 para Mac... • http://osvdb.org/71759 • CWE-189: Numeric Errors •
CVSS: 9.3EPSS: 68%CPEs: 5EXPL: 0CVE-2011-0103
https://notcve.org/view.php?id=CVE-2011-0103
13 Apr 2011 — Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted record information in an Excel file, aka "Excel Memory Corruption Vulnerability." Microsoft Excel 2002 SP3 y 2003 SP3, Office 2004 y 2008 para Mac, y Open XML File Format Converter para Mac permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (co... • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=901 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 77%CPEs: 5EXPL: 2CVE-2011-0104 – Microsoft Excel - Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-2011-0104
13 Apr 2011 — Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HLink record in an Excel file, aka "Excel Buffer Overwrite Vulnerability." Excel 2002 SP3 y 2003 SP3, Office 2004 y 2008 para Mac, y Open XML File Format Converter para Mac, de Microsoft, permiten a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cor... • https://www.exploit-db.com/exploits/35573 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 81%CPEs: 6EXPL: 1CVE-2011-0978 – Microsoft Office Excel Axis Properties Record Parsing Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2011-0978
07 Feb 2011 — Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via vectors related to an axis properties record, and improper incrementing of an array index, aka "Excel Array Indexing Vulnerability." Desbordamiento de búfer basado en pila en Microsoft Office Excel permite a atacantes remotos ejecutar código de su elecci... • https://www.exploit-db.com/exploits/17227 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 64%CPEs: 11EXPL: 0CVE-2011-0979 – Microsoft Office Excel Office Art Object Parsing Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2011-0979
07 Feb 2011 — Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; and Excel Viewer SP2 do not properly handle errors during the parsing of Office Art records in Excel spreadsheets, which allows remote attackers to execute arbitrary code via a malformed object record, related to a "stray reference," aka "Excel Linked List Corruption Vulnerability." Excel 2002 SP3, 2003 SP3, 2007 SP2 y 2010; Office 2004, 2008 y 2011 para Mac; Open XML File For... • http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 60%CPEs: 6EXPL: 0CVE-2011-0980 – Microsoft Office Excel 2003 Invalid Object Type Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2011-0980
07 Feb 2011 — Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office Art objects, which allows remote attackers to execute arbitrary code via vectors related to a function pointer, aka "Excel Dangling Pointer Vulnerability." Microsoft Office Excel 2003 no parsea correctamente objetos Office Art, lo que permite a atacantes remotos ejecutar código arbitrario a través de vectores relacionados con un puntero a función. This vulnerability al... • http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 54%CPEs: 7EXPL: 0CVE-2010-3232
https://notcve.org/view.php?id=CVE-2010-3232
13 Oct 2010 — Microsoft Excel 2003 SP3 and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel File Format Parsing Vulnerability." Microsoft Excel 2003 SP3 y 2007 SP2; Office 2004 y 2008 para Mac; Open XML File Format Converter para Mac; Excel Viewer SP2... • http://www.us-cert.gov/cas/techalerts/TA10-285A.html • CWE-20: Improper Input Validation •