CVE-2011-0105 is a critical buffer overflow vulnerability affecting Microsoft Excel 2002 SP3, Office 2004/2008 for Mac, and Open XML File Format Converter for Mac, allowing remote attackers to execute arbitrary code via a crafted Excel file due to improper memory initialization. With a CVSS score of 9.3 and an EPSS score of 0.894, this vulnerability presents a severe risk, enabling complete compromise of confidentiality, integrity, and availability with medium attack complexity. While not on the KEV catalog or Hot List, exploit code exists within Metasploit (MS11-021), indicating readily available tools for exploitation, despite a lack of broader community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2002CPE matchmatch criteria | cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:* | ||
2004CPE matchmatch criteria | cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:* | ||
2008CPE matchmatch criteria | cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:* | ||
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.