ID CVE-2011-0977
Summary Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format, aka "Microsoft Office Graphic Object Dereferencing Vulnerability."
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:excel:2007:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:excel:2007:*:*:*:*:*:*:*
CVSS
Base: 9.3 (as of 12-10-2018 - 21:59)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
msbulletin via4
bulletin_id MS11-023
bulletin_url
date 2011-04-12T00:00:00
impact Remote Code Execution
knowledgebase_id 2489293
knowledgebase_url
severity Important
title Vulnerabilities in Microsoft Office Could Allow Remote Code Execution
oval via4
accepted 2014-06-09T04:00:11.576-04:00
class vulnerability
contributors
  • name Dragos Prisaca
    organization Symantec Corporation
  • name Maria Mikhno
    organization ALTX-SOFT
definition_extensions
  • comment Microsoft Office XP is installed
    oval oval:org.mitre.oval:def:663
  • comment Microsoft Office 2003 SP3 is installed
    oval oval:org.mitre.oval:def:15626
  • comment Microsoft Office 2007 SP2 is installed
    oval oval:org.mitre.oval:def:15607
description Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format, aka "Microsoft Office Graphic Object Dereferencing Vulnerability."
family windows
id oval:org.mitre.oval:def:12339
status accepted
submitted 2011-04-12T13:00:00
title Microsoft Office Graphic Object Dereferencing Vulnerability
version 16
refmap via4
cert TA11-102A
misc
sectrack 1025343
secunia
  • 43216
  • 44015
vupen ADV-2011-0942
Last major update 12-10-2018 - 21:59
Published 10-02-2011 - 19:00
Last modified 12-10-2018 - 21:59
Back to Top