PT-2011-4429 · Microsoft · Office Powerpoint

Greg Macmanus · Publicado 2011-12-13 · Atualizado 2018-10-12 · CVE-2011-3396

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint versions 2007 SP2 through 2010

Description The issue allows local users to gain privileges via a Trojan horse DLL in the current working directory. A remote code execution vulnerability exists in the way that Microsoft PowerPoint handles the loading of DLL files. An attacker who successfully exploited this vulnerability could take complete control of an affected system, then install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Recommendations For Microsoft PowerPoint 2007 SP2, update to a version that is not affected by this issue. For Microsoft PowerPoint 2010, update to a version that is not affected by this issue. As a temporary workaround, consider restricting the loading of DLL files from untrusted locations to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2011-3396

Produtos afetados

Office Powerpoint

Referências · 7

• http://us-cert.gov/cas/techalerts/TA11-347A.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14665 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-094 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3396 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3396 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2011-3396 · Nota de Segurança
• http://technet.microsoft.com/en-us/security/bulletin/MS11-094 · Nota