CVE-2011-0978: Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel...

Security readout for executives and security teams

This is an old Microsoft Excel remote code execution issue. A malicious spreadsheet could trigger a stack-based buffer overflow when vulnerable Excel components process an axis properties record. Business risk is mainly legacy systems that still open untrusted Office files with unsupported or unpatched Microsoft Office versions. Exposure is most likely on legacy endpoints with Excel 2002 SP3, Excel 2003 SP3, Excel 2007 SP2, Office 2004 for Mac, Excel Viewer SP2, or Office Compatibility Pack SP2. Modern supported Office deployments are not identified as affected in the provided sources. Prioritize remediation if any legacy Office installations remain in business workflows. The vulnerability enables code execution through malicious spreadsheets, making it relevant to phishing and document intake risk, but evidence provided does not show current active exploitation. Mitigation focus: Apply Microsoft guidance and updates from MS11-021 where applicable.; Remove or isolate unsupported legacy Office and Excel Viewer installations.; Restrict handling of untrusted Excel files on legacy systems..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.