{"id":"CVE-2011-0097","published":"2011-04-13T18:00:00Z","modified":"2024-08-06T21:43:14Z","title":"Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via a crafted 400h substream in an Excel file, which triggers a stack-based buffer overflow, aka \"Excel Integer Overrun Vulnerability.\"","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is an integer underflow in Microsoft Excel (in 2002 SP3, 2003 SP3, 2007 SP2, and 2010), along with Office 2004 and 2008 for Mac, the Open XML File Format Converter for Mac, Excel Viewer SP2, and the Office Compatibility Pack SP2, which leads to a stack-based buffer overflow. An attacker who can get a crafted 400h substream into an Excel file can execute arbitrary code remotely.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:22:22Z"},"cvss":null,"epss":{"score":0.31553,"percentile":0.9828,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2021-08-17","exploitedFirstSeen":"2021-08-17","ransomware":false,"evidence":[{"url":"https://dl.acm.org/doi/pdf/10.1145/3465481.3465758","date":"2021-08-17"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":2,"pulses":[{"name":"CVE -CVE Reference Map for Source MS - Curios RE active candidates CVE version 20061101","url":"https://otx.alienvault.com/pulse/679c3446de4f362fac9217f9","created":"2025-01-31"},{"name":"Thor-Lite Linux 64 (06.11.24) - enriched a bit more but not 'pruned'","url":"https://otx.alienvault.com/pulse/6668b85065eec626e4766a38","created":"2024-06-11"}],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA11-102A.html","tags":["third-party-advisory","x_refsource_CERT"]},{"url":"http://secunia.com/advisories/39122","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/secunia_research/2011-31","tags":["x_refsource_MISC"]},{"url":"http://osvdb.org/71758","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://www.securitytracker.com/id?1025337","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-021","tags":["vendor-advisory","x_refsource_MS"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12612","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://www.securityfocus.com/bid/47201","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.vupen.com/english/advisories/2011/0940","tags":["vdb-entry","x_refsource_VUPEN"]}],"techniques":[],"reports":[{"id":"SRC-93c55e10ab45afc37c85","title":"Microsoft Security","publisher":"download.microsoft.com","url":"https://download.microsoft.com/download/E/B/0/EB0F50CC-989C-4B66-B7F6-68CD3DC90DE3/Microsoft_Security_Intelligence_Report_Volume_21_English.pdf","date":null,"mentions":[{"quote":"CVE-2011-0097","start":112223,"end":112236},{"quote":"CVE-2011-0097, 62","start":261235,"end":261252}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2011-0123","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-0123","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2011-04-13","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2011-0097","provenance":"source"},{"date":"2021-08-17","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://dl.acm.org/doi/pdf/10.1145/3465481.3465758","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":59.6,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1899 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.66,"detail":"percentile 0.9828"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":1.08,"detail":"2 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}