Unrated severityNVD Advisory· Published Sep 15, 2011· Updated Apr 29, 2026
CVE-2011-1990
CVE-2011-1990
Description
Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Excel Services on Office SharePoint Server 2007 SP2 do not properly validate the sign of an unspecified array index, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Out of Bounds Array Indexing Vulnerability."
Affected products
6- cpe:2.3:a:microsoft:excel_viewer:*:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:x32:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:x32:*:*:*:*:*
- cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:x64:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.