PT-2011-2807 · Microsoft+1 · Office+1

Josh Bressers · Publicado 2011-02-23 · Atualizado 2023-02-13 · CVE-2011-1003

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ClamAV versions prior to 0.97

Description A double free vulnerability exists in the vba read project strings function in vba extract.c in libclamav. This issue might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document.

Recommendations For versions prior to 0.97, update to version 0.97 or later to resolve the issue. As a temporary workaround, consider restricting the processing of VBA data in Microsoft Office documents until the update is applied.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2011-1003

Produtos afetados

Clamav

Office

Referências · 24

• http://vupen.com/english/advisories/2011/0523 · Nota
• http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commit%3Bh=d21fb8d975f8c9688894a8cef4d50d977022e09f · Nota
• http://secunia.com/advisories/43392 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65544 · Nota
• https://security-tracker.debian.org/tracker/CVE-2011-1003 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html · Aviso do Fabricante
• http://ubuntu.com/usn/USN-1076-1 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2011/02/21/1 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055771.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2011/02/21/4 · Nota
• http://securityfocus.com/bid/46470 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055777.html · Aviso do Fabricante
• https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2486 · Nota
• https://osv.dev/vulnerability/CVE-2011-1003 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1003 · Aviso do Fabricante