Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2011-1269 | First vendor Publication | 2011-05-13 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 9.3 | Attack Range | Network |
| Cvss Impact Score | 10 | Attack Complexity | Medium |
| Cvss Expoit Score | 8.6 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 make unspecified function calls during file parsing without proper handling of memory, which allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Presentation Memory Corruption RCE Vulnerability." |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1269 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-20 | Improper Input Validation |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:12438 | |||
| Oval ID: | oval:org.mitre.oval:def:12438 | ||
| Title: | Presentation Memory Corruption RCE Vulnerability | ||
| Description: | Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 make unspecified function calls during file parsing without proper handling of memory, which allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Presentation Memory Corruption RCE Vulnerability." | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2011-1269 | Version: | 10 |
| Platform(s): | Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 | Product(s): | Microsoft Office PowerPoint 2002 Microsoft Office PowerPoint 2003 Microsoft Office PowerPoint 2007 Microsoft Office Compatibility Pack |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 2 | |
| Application | 1 | |
| Application | 1 | |
| Application | 3 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2011-05-11 | Name : Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2545814) File : nvt/secpod_ms11-036.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 72235 | Microsoft Office PowerPoint File Handling Unspecified Memory Corruption A memory corruption flaw exists in Microsoft Office. The program fails to sanitize user-supplied input when handling PowerPoint files, resulting in memory corruption. With a specially crafted PowerPoint file, a context-dependent attacker can execute arbitrary code. |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | Microsoft Office PowerPoint bad text header txttype attempt RuleID : 24868 - Revision : 5 - Type : FILE-OFFICE |
| 2014-01-10 | Microsoft Office PowerPoint malformed RecolorInfoAtom out of bounds read attempt RuleID : 18949 - Revision : 8 - Type : FILE-OFFICE |
| 2014-01-10 | Microsoft Office PowerPoint bad text header txttype attempt RuleID : 16188 - Revision : 16 - Type : FILE-OFFICE |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2011-06-15 | Name : An application installed on the remote Mac OS X host is affected by multiple ... File : macosx_ms_office_jun2011.nasl - Type : ACT_GATHER_INFO |
| 2011-05-10 | Name : Arbitrary code can be executed on the remote host through Microsoft PowerPoint. File : smb_nt_ms11-036.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
| Source | Url |
|---|
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:05:14 |
|
| 2024-11-28 12:25:14 |
|
| 2021-05-04 12:14:13 |
|
| 2021-04-22 01:15:27 |
|
| 2020-05-23 00:28:06 |
|
| 2018-10-13 05:18:31 |
|
| 2017-09-19 09:24:20 |
|
| 2016-04-26 20:39:22 |
|
| 2014-02-17 11:01:22 |
|
| 2014-01-19 21:27:42 |
|
| 2013-05-10 22:57:16 |
|
