PT-2011-3521 · Microsoft · Office

Parvez Anwar · Published 2011-09-15 · Updated 2018-10-12 · CVE-2011-1980

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2003 SP3 through 2007 SP2

Description The issue allows local users to gain privileges via a Trojan horse DLL in the current working directory. A remote code execution vulnerability exists in the way that Microsoft Office handles the loading of DLL files, which could allow an attacker to take complete control of an affected system. This could enable the attacker to install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights on the system could be less impacted than those operating with administrative user rights.

Recommendations For Microsoft Office 2003 SP3, update to a version that is not affected by this issue. For Microsoft Office 2007 SP2, update to a version that is not affected by this issue. As a temporary workaround, consider restricting the loading of DLL files from untrusted locations to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2011-1980

Affected Products

Office

References · 6

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-073 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1980 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1980 · Security Note
• http://us-cert.gov/cas/techalerts/TA11-256A.html · Note
• http://technet.microsoft.com/en-us/security/bulletin/MS11-073 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12694 · Note