9.3

CVE-2011-0098

Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via an XLS file with a large record size, aka "Excel Heap Overflow Vulnerability."

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Excel Version- Update- Editionx64
Microsoft ≫ Excel Version2002 Updatesp3
Microsoft ≫ Excel Version2003 Updatesp3
Microsoft ≫ Excel Version2007 Updatesp2
Microsoft ≫ Excel Version2010
Microsoft ≫ Excel Viewer Version- Updatesp2
Microsoft ≫ Office Version2004 Editionmac
Microsoft ≫ Office Version2008 Editionmac
Microsoft ≫ Office Compatibility Pack Version2007 Updatesp2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 63.61% 0.983
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C