CVE-2011-0979

Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; and Excel Viewer SP2 do not properly handle errors during the parsing of Office Art records in Excel spreadsheets, which allows remote attackers to execute arbitrary code via a malformed object record, related to a "stray reference," aka "Excel Linked List Corruption Vulnerability."

• CWE-20

• http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft
• http://osvdb.org/70904
• http://secunia.com/advisories/39122Vendor Advisory
• http://secunia.com/advisories/43231Vendor Advisory
• http://www.securitytracker.com/id?1025337
• http://www.us-cert.gov/cas/techalerts/TA11-102A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2011/0940Vendor Advisory
• http://zerodayinitiative.com/advisories/ZDI-11-041/
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-021
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12595
• http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft
• http://osvdb.org/70904
• http://secunia.com/advisories/39122Vendor Advisory
• http://secunia.com/advisories/43231Vendor Advisory
• http://www.securitytracker.com/id?1025337
• http://www.us-cert.gov/cas/techalerts/TA11-102A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2011/0940Vendor Advisory
• http://zerodayinitiative.com/advisories/ZDI-11-041/
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-021
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12595

Published

Feb 10, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0963The default configuration of the RADIUS authentication featu…
• CVE-2011-0966Directory traversal vulnerability in cwhp/auditLog.do in the…
• CVE-2011-0975Stack-based buffer overflow in BMC PATROL Agent Service Daem…
• CVE-2011-0976Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Offic…
• CVE-2011-0977Use-after-free vulnerability in Microsoft Office XP SP3, Off…
• CVE-2011-0978Stack-based buffer overflow in Microsoft Excel 2002 SP3, 200…
• CVE-2011-0980Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 …
• CVE-2011-0981Google Chrome before 9.0.597.94 does not properly perform ev…
• CVE-2011-0982Use-after-free vulnerability in Google Chrome before 9.0.597…
• CVE-2011-0983Google Chrome before 9.0.597.94 does not properly handle ano…
• CVE-2011-0984Google Chrome before 9.0.597.94 does not properly handle plu…
• CVE-2011-0985Google Chrome before 9.0.597.94 does not properly perform pr…