CVE-2011-0105
Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for...
Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data Initialization Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data Initialization Vulnerability."
- Record
CVE-2011-0105- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data Initialization Vulnerability."
- Record
CVE-2011-0105- Updated
- 2026-11-02
EUVDEUVD-2011-0131 No score
Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data Initialization Vulnerability."
- Record
EUVD-2011-0131- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rpg9-x63j-3644 No score
Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for...
Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data Initialization Vulnerability."
- Record
GHSA-rpg9-x63j-3644- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Excel 2007 - '.xlb' Local Buffer Overflow (MS11-021) (Metasploit) | 2011-11-05 |
| Metasploit | MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow | 2011-08-09 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-0105 is a high vulnerability (CVSS 9.3) in Microsoft Excel, published April 13, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 70.2%, the 99th percentile. No source names a fixed version.
References
us-cert.gov/cas/techalerts/TA11-102A.html
secunia.com/advisories/39122
securitytracker.com/id?1025337
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12618
docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-021
vupen.com/english/advisories/2011/0940
nvd.nist.gov/vuln/detail/CVE-2011-0105
github.com/advisories/GHSA-rpg9-x63j-3644