CVE-2012-1885: Buffer Overflow
Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SerAuxErrBar Heap Overflow Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1885?
CVE-2012-1885 is considered critical due to its potential to allow remote attackers to execute arbitrary code.
How do I fix CVE-2012-1885?
To mitigate CVE-2012-1885, users should update to the latest version of Microsoft Excel and apply all available security patches.
Which versions of Microsoft Excel are affected by CVE-2012-1885?
CVE-2012-1885 affects Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1 for Windows, as well as Office 2008 and 2011 for Mac.
Can CVE-2012-1885 affect non-Windows users?
Yes, users of Office 2008 and 2011 for Mac are also at risk from CVE-2012-1885.
What types of attacks can exploit CVE-2012-1885?
CVE-2012-1885 can be exploited through crafted spreadsheet files that, when opened, can lead to remote code execution.