PT-2013-2099 · Microsoft+1 · Office 2008 For Mac+2

Publicado 2013-03-13 · Atualizado 2018-10-12 · CVE-2013-0095

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Office for Mac 2008 versions prior to 12.3.6 Microsoft Office for Mac 2011 versions prior to 14.3.2

Description The issue allows remote attackers to trigger access to a remote URL and confirm the rendering of an HTML e-mail message by including unspecified HTML5 elements. This is possible by leveraging the installation of a WebKit browser on the victim's machine.

Recommendations For Microsoft Office for Mac 2008 versions prior to 12.3.6, update to version 12.3.6 or later. For Microsoft Office for Mac 2011 versions prior to 14.3.2, update to version 14.3.2 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-0095

Produtos afetados

Office 2008 For Mac

Office For Mac 2011

Webkit

Referências · 4

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-026 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16082 · Nota
• http://us-cert.gov/ncas/alerts/TA13-071A · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-0095 · Nota de Segurança