Unrated severityNVD Advisory· Published Jun 16, 2011· Updated Apr 29, 2026

CVE-2011-1278

Description

Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel WriteAV Vulnerability."

Affected products

Microsoft/Excel
cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*
Microsoft/Office
cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/48163nvd
docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045nvd
exchange.xforce.ibmcloud.com/vulnerabilities/67716nvd
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12687nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.040
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000