PT-2012-3632 · Microsoft · Office For Mac 2011

Published 2012-07-10 · Updated 2018-10-12 · CVE-2012-1894

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office for Mac 2011

Description The issue allows local users to gain privileges by placing a Trojan horse executable file in certain directories due to improper folder permissions.

Recommendations For Microsoft Office for Mac 2011, consider changing the permissions of the affected directories to prevent unauthorized access until a patch is available. Restrict write access to the "Applications/Microsoft Office 2011/" directory and other affected directories to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-1894

Affected Products

Office For Mac 2011

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-1894 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-051 · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA12-192A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15602 · Note