PT-2013-2099 · Microsoft+1 · Office 2008 For Mac+2

Published 2013-03-13 · Updated 2018-10-12 · CVE-2013-0095

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Office for Mac 2008 versions prior to 12.3.6 Microsoft Office for Mac 2011 versions prior to 14.3.2

Description The issue allows remote attackers to trigger access to a remote URL and confirm the rendering of an HTML e-mail message by including unspecified HTML5 elements. This is possible by leveraging the installation of a WebKit browser on the victim's machine.

Recommendations For Microsoft Office for Mac 2008 versions prior to 12.3.6, update to version 12.3.6 or later. For Microsoft Office for Mac 2011 versions prior to 14.3.2, update to version 14.3.2 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2013-0095

Affected Products

Office 2008 For Mac

Office For Mac 2011

Webkit

References · 4

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-026 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-0095 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16082 · Note
• http://us-cert.gov/ncas/alerts/TA13-071A · Note