CVE-2012-1885

CVE-2012-1885 is a critical heap-based buffer overflow vulnerability affecting multiple versions of Microsoft Excel, Office for Mac, and the Office Compatibility Pack. This flaw allows remote attackers to execute arbitrary code on a vulnerable system by enticing a user to open a specially crafted spreadsheet. With a CVSS score of 9.3, it presents a high risk due to its network-based attack vector, medium complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity and EPSS score, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, suggesting it is not currently a prevalent threat.