kbrain

CVE-2011-1273

HIGH · CVSS 9.3EPSS 17.0%EU EUVD

Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Improper Record Parsing Vulnerability."

Key facts

CVSS score
9.3 (v2.0)
Severity
HIGH
CVSS vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness (CWE)
CWE-119
EPSS score
17.0% (97th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2011-1281)
Published
June 16, 2011
NVD last modified
June 16, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2011-1281 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

  • microsoft / excel
  • microsoft / excel
  • microsoft / excel
  • microsoft / excel
  • microsoft / excel
  • microsoft / excel viewer
  • microsoft / office
  • microsoft / office
  • microsoft / office
  • microsoft / office compatibility pack
  • microsoft / open xml file format converter

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain