CVE-2011-1278: Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing...

Security readout for executives and security teams

A malicious Excel spreadsheet could affect legacy Microsoft Excel 2002 SP3 or Office 2004 for Mac systems. Opening the file may allow attacker-controlled code execution or crash the application. Business urgency depends on whether these old Office versions still exist in the environment. Exposure appears limited to Microsoft Excel 2002 SP3 and Office 2004 for Mac as named in the CVE description. The supplied bundle does not provide broader affected CPEs or version ranges. Treat as high priority only if legacy Office remains in use. This is an old vulnerability, but the impact is serious because successful exploitation can run code through a document file. Mitigation focus: Review Microsoft MS11-045 guidance for the vendor-provided update or workaround details.; Identify and retire unsupported Excel 2002 SP3 and Office 2004 for Mac installations.; Restrict opening untrusted legacy Excel files on systems that cannot be updated..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.