Unrated severityNVD Advisory· Published Jun 16, 2011· Updated Apr 29, 2026

CVE-2011-1277

Description

Microsoft Excel 2002 SP3, Office 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Memory Corruption Vulnerability."

Affected products

Microsoft/Excel
cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*
Microsoft/Office
cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*
Microsoft/Open XML File Format Converter
cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/48162nvd
docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045nvd
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12291nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.040
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000