PT-2011-2092 · Microsoft · Office

Published 2011-04-13 · Updated 2018-10-12 · CVE-2011-0107

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office versions XP SP3, 2003 SP3, 2007 SP2

Description The issue allows local users to gain privileges via a Trojan horse DLL in the current working directory. A remote code execution vulnerability exists in the way that Microsoft Office handles the loading of DLL files, which could allow an attacker to take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Office XP SP3, update to a version that fixes the insecure library loading issue. For Microsoft Office 2003 SP3, update to a version that fixes the insecure library loading issue. For Microsoft Office 2007 SP2, update to a version that fixes the insecure library loading issue. As a temporary workaround, consider restricting the loading of DLL files from untrusted directories to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2011-0107

Affected Products

Office

References · 12

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0107 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-0107 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-023 · Vendor Advisory
• http://securitytracker.com/id?1025343 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12655 · Note
• http://osvdb.org/71767 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2011/MS11-023 · Note
• http://vupen.com/english/advisories/2011/0942 · Note
• http://us-cert.gov/cas/techalerts/TA11-102A.html · Note
• http://fortiguard.com/advisory/FGA-2011-13.html · Note
• http://securityfocus.com/bid/47246 · Note
• http://secunia.com/advisories/44015 · Note