cbcvebase.
CVE-2011-0098
published 2011-04-13

CVE-2011-0098: Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel…

PriorityP260critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
30.50%
98.0th percentile
Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via an XLS file with a large record size, aka "Excel Heap Overflow Vulnerability."

Affected

7 ranges
VendorProductVersion rangeFixed in
microsoftexcel——
microsoftexcel——
microsoftexcel——
microsoftexcel——
microsoftoffice——
microsoftoffice——
microsoftoffice_compatibility_pack——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.