CVE-2012-0141: Buffer Overflow

Published May 9, 2012

Updated

Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel File Format Memory Corruption Vulnerability."

Affected Software

9 affected components

Microsoft Excel=2003-sp3

Microsoft Excel=2007-sp2

Microsoft Excel=2007-sp3

Microsoft Excel=2010

Microsoft Excel=2010-sp1

Microsoft Excel Viewer

Microsoft Office=2011

Microsoft Office Compatibility Pack=sp2

Microsoft Office Compatibility Pack=sp3

Event History

May 9, 2012

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-0141?

CVE-2012-0141 is classified as a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2012-0141?

To fix CVE-2012-0141, update Microsoft Excel and related products to the latest security patches provided by Microsoft.

What products are affected by CVE-2012-0141?

CVE-2012-0141 affects Microsoft Excel 2003, 2007, 2010, Office 2011 for Mac, Excel Viewer, and the Office Compatibility Pack SP2 and SP3.

What type of vulnerability is CVE-2012-0141?

CVE-2012-0141 is a memory corruption vulnerability that occurs when opening crafted Excel files.

Who can exploit CVE-2012-0141?

CVE-2012-0141 can be exploited by remote attackers who send specially crafted spreadsheet files to users.