Executive Summary
Informations | |||
---|---|---|---|
Name | CVE-2011-0107 | First vendor Publication | 2011-04-13 |
Vendor | Cve | Last vendor Modification | 2018-10-12 |
Security-Database Scoring CVSS v3
Cvss vector : N/A | |||
---|---|---|---|
Overall CVSS Score | NA | ||
Base Score | NA | Environmental Score | NA |
impact SubScore | NA | Temporal Score | NA |
Exploitabality Sub Score | NA | ||
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C) | |||
---|---|---|---|
Cvss Base Score | 9.3 | Attack Range | Network |
Cvss Impact Score | 10 | Attack Complexity | Medium |
Cvss Expoit Score | 8.6 | Authentication | None Required |
Calculate full CVSS 2.0 Vectors scores |
Detail
Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Office Component Insecure Library Loading Vulnerability." |
Original Source
Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0107 |
OVAL Definitions
Definition Id: oval:org.mitre.oval:def:12655 | |||
Oval ID: | oval:org.mitre.oval:def:12655 | ||
Title: | Office Component Insecure Library Loading Vulnerability | ||
Description: | Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Office Component Insecure Library Loading Vulnerability." | ||
Family: | windows | Class: | vulnerability |
Reference(s): | CVE-2011-0107 | Version: | 5 |
Platform(s): | Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows 7 | Product(s): | Microsoft Office XP Microsoft Office 2003 Microsoft Office 2007 |
Definition Synopsis: | |||
|
CPE : Common Platform Enumeration
Type | Description | Count |
---|---|---|
Application | 3 |
OpenVAS Exploits
Date | Description |
---|---|
2012-03-06 | Name : Microsoft SMB Transaction Parsing Remote Code Execution Vulnerability File : nvt/secpod_ms11-020_remote.nasl |
2011-04-13 | Name : Microsoft Office Remote Code Execution Vulnerabilites (2489293) File : nvt/secpod_ms11-023.nasl |
2011-02-23 | Name : Microsoft Excel 2007 Office Drawing Layer Remote Code Execution Vulnerability File : nvt/gb_ms_office_excel_drawing_layer_code_exec_vuln.nasl |
Open Source Vulnerability Database (OSVDB)
Id | Description |
---|---|
71767 | Microsoft Office Path Subversion Arbitrary DLL Injection Code Execution Microsoft Office is prone to a flaw in the way it loads dynamic-link libraries (DLL). The program uses a fixed path to look for specific files or libraries. This path includes directories that may not be trusted or under user control. By placing a custom version of the file or library in the path, the program will load it before the legitimate version. This allows an attacker to inject custom code that will be run with the privilege of the program or user executing the program. This can be done by tricking a user into opening a .docx file from the local file system or a USB drive in some cases. This attack can be leveraged remotely in some cases by placing the malicious file or library on a network share or extracted archive downloaded from a remote source. |
Information Assurance Vulnerability Management (IAVM)
Date | Description |
---|---|
2011-04-14 | IAVM : 2011-A-0045 - Multiple Vulnerabilities in Microsoft Office Severity : Category II - VMSKEY : V0026527 |
Snort® IPS/IDS
Date | Description |
---|---|
2016-03-14 | Microsoft Office Word request for rpawinet.dll over SMB attempt RuleID : 37319 - Revision : 5 - Type : FILE-OFFICE |
2016-03-14 | Microsoft Office Word rpawinet.dll dll-load exploit attempt RuleID : 37318 - Revision : 5 - Type : FILE-OFFICE |
2014-03-15 | Microsoft Internet Explorer SelectAll dangling pointer use after free attempt RuleID : 29797 - Revision : 3 - Type : BROWSER-IE |
2014-03-15 | Microsoft Internet Explorer SelectAll dangling pointer use after free attempt RuleID : 29796 - Revision : 3 - Type : BROWSER-IE |
2014-01-10 | Microsoft Office Excel drawing layer use after free attempt RuleID : 24242 - Revision : 7 - Type : FILE-OFFICE |
2014-01-10 | Microsoft Office Excel drawing layer use after free attempt RuleID : 24241 - Revision : 7 - Type : FILE-OFFICE |
2014-01-10 | Microsoft Office Excel drawing layer use after free attempt RuleID : 24240 - Revision : 7 - Type : FILE-OFFICE |
2014-01-10 | Microsoft Internet Explorer SelectAll dangling pointer use after free attempt RuleID : 22038 - Revision : 8 - Type : BROWSER-IE |
2014-01-10 | Microsoft Internet Explorer SelectAll dangling pointer use after free attempt RuleID : 21791 - Revision : 7 - Type : BROWSER-IE |
2014-01-10 | Microsoft Internet Explorer SelectAll dangling pointer use after free attempt RuleID : 21790 - Revision : 7 - Type : BROWSER-IE |
2014-01-10 | Microsoft product fputlsat.dll dll-load exploit attempt RuleID : 21310 - Revision : 7 - Type : OS-WINDOWS |
2014-01-10 | Microsoft product request for fputlsat.dll over SMB attempt RuleID : 21309 - Revision : 7 - Type : OS-WINDOWS |
2015-05-28 | Microsoft Word .dll dll-load exploit attempt RuleID : 18650 - Revision : 4 - Type : NETBIOS |
2015-05-28 | Microsoft Word .dll dll-load exploit attempt RuleID : 18647 - Revision : 3 - Type : WEB-CLIENT |
2014-01-10 | Microsoft Office Excel drawing layer use after free attempt RuleID : 18638 - Revision : 20 - Type : FILE-OFFICE |
2014-01-10 | Microsoft product .dll dll-load exploit attempt RuleID : 18495 - Revision : 21 - Type : OS-WINDOWS |
2014-01-10 | Microsoft product .dll dll-load exploit attempt RuleID : 18494 - Revision : 25 - Type : OS-WINDOWS |
Nessus® Vulnerability Scanner
Date | Description |
---|---|
2011-04-13 | Name : An application installed on the remote Mac OS X host is affected by multiple ... File : macosx_ms_office_apr2011.nasl - Type : ACT_GATHER_INFO |
2011-04-13 | Name : Arbitrary code can be executed on the remote host through Microsoft Office. File : smb_nt_ms11-023.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
Date | Informations |
---|---|
2021-05-04 12:13:47 |
|
2021-04-22 01:14:57 |
|
2020-05-23 00:27:32 |
|
2018-10-13 00:23:03 |
|
2017-09-19 09:24:09 |
|
2016-06-28 18:29:27 |
|
2016-04-26 20:27:42 |
|
2015-05-28 21:26:30 |
|
2014-02-17 10:59:27 |
|
2014-01-19 21:27:23 |
|
2013-11-11 12:39:10 |
|
2013-05-10 22:52:17 |
|