CVE-2011-1272: Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Conver...

Security readout for executives and security teams

A malicious Excel spreadsheet could cause vulnerable Microsoft Excel or Office components to run attacker-supplied code. The main business risk is legacy machines opening untrusted spreadsheets from email, downloads, or partners. This is old, but still matters where obsolete Office 2002, 2003, 2007, Mac Office 2004/2008, Excel Viewer, or Compatibility Pack remain. Likely exposure is legacy endpoint software, not server-side infrastructure. Prioritize asset inventories for the affected Microsoft Office and Excel components listed in the CVE description, especially systems that process external spreadsheets. Treat as high priority only if legacy Office remains in use. If the environment is modern and fully patched, urgency drops, but asset validation is still needed because unsupported Office components often persist unnoticed. Mitigation focus: Apply Microsoft guidance and updates from MS11-045 where applicable.; Remove or isolate obsolete affected Office and Excel components.; Restrict opening untrusted Excel files on legacy systems..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.