New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2011-1990

NVDCIRCLENISA

EUVD-2011-1984 · Published Sep 15, 2011

Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Excel Services on Office SharePoint Server 2007 SP2 do not properly validate the sign of an unspecified array index, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Out of Bounds Array Indexing Vulnerability."

Technologies

Microsoft Sharepoint ServerMicrosoft Excel ViewerMicrosoft Office Compatibility PackMicrosoft ExcelMicrosoft Office

Weaknesses

CWE-119

CVSS scores

  • v2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot