CVE-2011-0977

CVE-2011-0977 is a critical use-after-free vulnerability affecting multiple versions of Microsoft Office, including Office XP, 2003, 2007, and Office for Mac, as well as the Open XML File Format Converter for Mac. This flaw allows remote attackers to execute arbitrary code by enticing a user to open a specially crafted Office document containing malformed shape data. With a CVSS score of 9.3, it represents a severe risk due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. While the EPSS score indicates a high likelihood of exploitation, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.