PT-2012-3632 · Microsoft · Office For Mac 2011

Publicado 2012-07-10 · Atualizado 2018-10-12 · CVE-2012-1894

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office for Mac 2011

Description The issue allows local users to gain privileges by placing a Trojan horse executable file in certain directories due to improper folder permissions.

Recommendations For Microsoft Office for Mac 2011, consider changing the permissions of the affected directories to prevent unauthorized access until a patch is available. Restrict write access to the "Applications/Microsoft Office 2011/" directory and other affected directories to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-1894

Produtos afetados

Office For Mac 2011

Referências · 4

• http://us-cert.gov/cas/techalerts/TA12-192A.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15602 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1894 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-051 · Aviso do Fabricante