cve/cves/2011/CVE-2011-0105.md

CVE-2011-0105

Description

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data Initialization Vulnerability."

POC

Reference

No PoCs from references.

Github

No PoCs found on GitHub currently.

ExploitDB

• https://www.exploit-db.com/exploits/18087

Metasploit

• https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms11_021_xlb_bof.rb