$ cve CVE-2011-0978 JSON

CVE-2011-0978 EXPLOIT

9.3

HIGH · CVSS 2.0 · EPSS 42.6% (pctl 99)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via vectors related to an axis properties record, and improper incrementing of an array index, aka "Excel Array Indexing Vulnerability."

Scoring

CVSS	9.3 (HIGH, v2.0)
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS	42.56% — more likely to be exploited than 99% of all CVEs
Weakness	CWE-119
On CISA KEV	no
Public exploit	yes
Published	2011-02-10
Last modified	2026-06-16

Affected (4)

Vendor	Product
microsoft	excel
microsoft	excel viewer
microsoft	office
microsoft	office compatibility pack

Public exploits

Source	Title	Date
exploit-db	Microsoft Excel - Axis Properties Record Parsing Buffer Overflow (PoC) (MS11-02)	2011-04-29

References

→ the Explorer · watch your stack · NVD