PT-2011-2785 · Microsoft · Office 2007+6

Published 2011-02-07 · Updated 2018-10-12 · CVE-2011-0977

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office XP version SP3 Microsoft Office 2003 version SP3 Microsoft Office 2007 version SP2 Microsoft Office 2004 for Mac Microsoft Office 2008 for Mac Open XML File Format Converter for Mac

Description A remote code execution issue exists in the way Microsoft Office handles graphic objects when parsing a specially crafted Office file. This allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format. An attacker who successfully exploits this issue could take complete control of an affected system, then install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights on the system could be less impacted than users operating with administrative user rights.

Recommendations For Microsoft Office XP SP3, update to a newer version to mitigate the risk. For Microsoft Office 2003 SP3, update to a newer version to mitigate the risk. For Microsoft Office 2007 SP2, update to a newer version to mitigate the risk. For Microsoft Office 2004 for Mac, update to a newer version to mitigate the risk. For Microsoft Office 2008 for Mac, update to a newer version to mitigate the risk. For Open XML File Format Converter for Mac, update to a newer version to mitigate the risk. As a temporary workaround, consider restricting the use of graphic objects in Office files until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-0977

ZDI-11-043

Affected Products

Office 2003

Office 2004 For Mac

Office 2007

Office 2008 For Mac

Office Xp

Office

Open Xml File Format Converter For Mac

References · 14

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-023 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0977 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-0977 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-11-043 · Security Note
• http://securitytracker.com/id?1025343 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12339 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0977 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2011/MS11-023 · Note
• http://vupen.com/english/advisories/2011/0942 · Note
• http://us-cert.gov/cas/techalerts/TA11-102A.html · Note
• http://secunia.com/advisories/43216 · Note
• http://secunia.com/advisories/44015 · Note
• http://zerodayinitiative.com/advisories/ZDI-11-043 · Note
• http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft · Note