CVE-2011-0105 CVE-2011-0105

漏洞描述

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data Initialization Vulnerability."

影响产品

微软公司Microsoft Excel查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

secunia.comhttp://secunia.com/advisories/39122↗docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-021↗www.vupen.comhttp://www.vupen.com/english/advisories/2011/0940↗oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12618↗www.securitytracker.comhttp://www.securitytracker.com/id?1025337↗www.us-cert.govhttp://www.us-cert.gov/cas/techalerts/TA11-102A.html↗

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2016-7262 CVE-2016-7262 Microsoft Excel	高危	7.8	85.2%	PoCEXP	2016/12/20
CVE-2015-0097RCE CVE-2015-0097 Microsoft Excel Microsoft PowerPoint Microsoft Word	严重	9.3	74.7%	PoCEXP	2015/03/11
CVE-2012-0143RCE CVE-2012-0143 Microsoft-Office-XML Microsoft Excel	严重	9.3	60.6%	PoCEXP	2012/05/09
CVE-2011-0978RCE CVE-2011-0978 Microsoft Excel	严重	9.3	81.4%	PoCEXP	2011/02/10
CVE-2010-0822RCE CVE-2010-0822 Microsoft Excel	严重	9.3	80.4%	PoCEXP	2010/06/08
CVE-2010-0258RCE CVE-2010-0258 Microsoft Excel	高危	7.8	71.4%	PoCEXP	2010/03/10

利用情报状态

漏洞描述

影响产品

修复建议

参考链接

同产品关联漏洞