PT-2011-2807 · Microsoft+1 · Office+1

Josh Bressers · Published 2011-02-23 · Updated 2023-02-13 · CVE-2011-1003

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ClamAV versions prior to 0.97

Description A double free vulnerability exists in the vba read project strings function in vba extract.c in libclamav. This issue might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document.

Recommendations For versions prior to 0.97, update to version 0.97 or later to resolve the issue. As a temporary workaround, consider restricting the processing of VBA data in Microsoft Office documents until the update is applied.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-1003

Affected Products

Clamav

Office

References · 24

• http://secunia.com/advisories/43392 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-1003 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html · Vendor Advisory
• http://ubuntu.com/usn/USN-1076-1 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055771.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055777.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-1003 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1003 · Vendor Advisory
• http://mandriva.com/en/support/security/advisories/?name=MDVA-2011:007 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1003 · Security Note
• http://vupen.com/english/advisories/2011/0458 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0453 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0523 · Note
• http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commit%3Bh=d21fb8d975f8c9688894a8cef4d50d977022e09f · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65544 · Note