Buffer Overflow Vulnerability in Microsoft Excel and Office for Mac

CVE-2011-0105

Summary

A vulnerability exists in Microsoft Excel and Office for Mac due to improper handling of certain length values from uninitialized memory locations. This flaw allows remote attackers to exploit crafted Excel files to initiate a buffer overflow, potentially enabling the execution of arbitrary code within the context of the user. Affected products include Microsoft Excel 2002 Service Pack 3 and Office versions 2004 and 2008 for Mac, as well as the Open XML File Format Converter for Mac.

References