CVE-2011-0097: Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac;...

Security readout for executives and security teams

This is an old Microsoft Excel file-parsing flaw. A crafted Excel document can trigger memory corruption and allow code execution. The main business risk is legacy Office installations opening untrusted spreadsheets, especially on endpoints that still run the affected 2002, 2003, 2007, 2010, Mac, Viewer, or Compatibility Pack versions. Exposure is most likely in organizations retaining legacy Microsoft Office components or viewers capable of opening Excel files. Modern environments are less likely affected unless old Office installations, converters, or compatibility packs remain on endpoints or virtual desktops. Prioritize remediation if legacy Office is still present. The vulnerability enables code execution from a malicious spreadsheet, but the available bundle does not prove current exploitation. The practical urgency depends on whether affected 2011-era Microsoft components remain in use. Mitigation focus: Inventory endpoints for the affected Microsoft Office and Excel components.; Review Microsoft MS11-021 and apply applicable vendor guidance.; Retire unsupported Office versions where feasible..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.