CVE-2011-0101

Published: Apr 13, 2011Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted RealTimeData record, related to a stTopic field, double-byte characters, and an incorrect pointer calculation, aka "Excel Record Parsing WriteAV Vulnerability."

Affected (1)

Products: Microsoft: Excel

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Excel	Version 2002 sp3

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (20)

http://osvdb.org/71766

Source: secure@microsoft.com

http://secunia.com/advisories/39122

Source: secure@microsoft.com

Vendor Advisory

http://www.securityfocus.com/archive/1/517463/100/0/threaded

Source: secure@microsoft.com

http://www.securityfocus.com/bid/47243

Source: secure@microsoft.com

http://www.securitytracker.com/id?1025337

Source: secure@microsoft.com

http://www.us-cert.gov/cas/techalerts/TA11-102A.html

Source: secure@microsoft.com

US Government Resource

http://www.vupen.com/english/advisories/2011/0940

Source: secure@microsoft.com

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-11-120

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-021

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11676

Source: secure@microsoft.com

http://osvdb.org/71766

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/39122

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/517463/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/47243

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1025337

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA11-102A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2011/0940

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-11-120

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-021

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11676

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.