CVE-2011-1990: Buffer Overflow

Published Sep 15, 2011

Updated

Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Excel Services on Office SharePoint Server 2007 SP2 do not properly validate the sign of an unspecified array index, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Out of Bounds Array Indexing Vulnerability."

Affected Software

6 affected components

Microsoft Excel=2007-sp2

Microsoft Excel Viewer=sp2

Microsoft Office=2007-sp2

Microsoft Office Compatibility Pack=2007-sp2

Microsoft SharePoint Server=2007-sp2

Event History

Sep 15, 2011

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2011-1990?

CVE-2011-1990 has a medium severity rating, indicating potential for exploitation.

How do I fix CVE-2011-1990?

To fix CVE-2011-1990, users should install the security update provided by Microsoft.

What software is affected by CVE-2011-1990?

CVE-2011-1990 affects Microsoft Excel 2007 SP2, Excel Viewer SP2, and various Office 2007 applications.

Can CVE-2011-1990 be exploited remotely?

Yes, CVE-2011-1990 allows remote attackers to exploit the vulnerability via specially crafted files.

What type of vulnerability is CVE-2011-1990?

CVE-2011-1990 is a validation vulnerability associated with improper array index handling.