CVE-2011-0977

Published: Feb 10, 2011Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format, aka "Microsoft Office Graphic Object Dereferencing Vulnerability."

Affected (1)

Products: Microsoft: Excel

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Excel	Version 2007

Related CWEs

References (18)

http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft

Source: cve@mitre.org

http://secunia.com/advisories/43216

Source: cve@mitre.org

http://secunia.com/advisories/44015

Source: cve@mitre.org

http://www.securitytracker.com/id?1025343

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA11-102A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2011/0942

Source: cve@mitre.org

http://zerodayinitiative.com/advisories/ZDI-11-043/

Source: cve@mitre.org

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-023

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12339

Source: cve@mitre.org

http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43216

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/44015

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1025343

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA11-102A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2011/0942

Source: af854a3a-2127-422b-91ae-364da2661108

http://zerodayinitiative.com/advisories/ZDI-11-043/

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-023

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12339

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.