CVE-2011-0105: Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a...

Security readout for executives and security teams

This is a legacy Microsoft Excel remote code execution issue. A malicious Excel file can trigger memory corruption in affected Excel or Mac Office components and may allow attacker-controlled code to run. Business risk depends mainly on whether these obsolete products still exist and whether users can open untrusted spreadsheet files. Exposure is most likely on legacy endpoints running the named Microsoft Office products or converter. Modern Office versions are not identified as affected in the provided sources. Organizations with old Mac Office deployments, archived virtual desktops, or unsupported lab systems should verify inventory. Prioritize if legacy Microsoft Office software remains in production or reachable by users. The issue enables arbitrary code execution through a document workflow, but the available bundle does not show current exploitation. If affected software is gone, residual risk is low. Mitigation focus: Review Microsoft MS11-021 and apply the vendor security update where applicable.; Remove or isolate unsupported Office 2002, Office 2004, Office 2008, and legacy converters.; Restrict opening untrusted Excel files on systems that cannot be updated..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.