Executive Summary

Summary
Title Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2587505)
Informations
Name MS11-072 First vendor Publication 2011-09-13
Vendor Microsoft Last vendor Modification 2011-10-11
Severity (Vendor) Important Revision 1.1

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score 9.3 Attack Range Network
Cvss Impact Score 10 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Severity Rating: Important

Revision Note: V1.1 (October 11, 2011): Announced a detection logic change for update KB2553094. There were no changes to the security update files. See the Update FAQ for details.

Summary: This security update resolves five privately reported vulnerabilities in Microsoft Office. The vulnerabilities could allow remote code execution if a user opens a specially crafted Excel file. An attacker who successfully exploited any of these vulnerabilities could gain the same user rights as the logged-on user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Installing and configuring Office File Validation (OFV) to prevent the opening of suspicious files blocks the attack vectors for exploiting the vulnerabilities described in CVE-2011-1986 and CVE-2011-1987. See the section, Frequently Asked Questions (FAQ) Related to This Security Update, for more information about how the Office File Validation feature can be configured to block the attack vectors.

Original Source

Url : http://technet.microsoft.com/en-us/security/bulletin/ms11-072

CWE : Common Weakness Enumeration

% Id Name
60 % CWE-119 Failure to Constrain Operations within the Bounds of a Memory Buffer
20 % CWE-399 Resource Management Errors
20 % CWE-20 Improper Input Validation

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:11982
 
Oval ID: oval:org.mitre.oval:def:11982
Title: Excel Out of Bounds Array Indexing Vulnerability
Description: Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Excel Services on Office SharePoint Server 2007 SP2 do not properly validate the sign of an unspecified array index, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Out of Bounds Array Indexing Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2011-1990
 Version: 11
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows 7
 Product(s): Microsoft Excel 2007
Microsoft Office 2007
Microsoft Office Excel Viewer
Microsoft Office Compatibility Pack
Microsoft Office SharePoint Server 2007
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:12345
 
Oval ID: oval:org.mitre.oval:def:12345
Title: Excel Use after Free WriteAV Vulnerability
Description: Use-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Use after Free WriteAV Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2011-1986
 Version: 5
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows 7
 Product(s): Microsoft Excel 2003
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:12836
 
Oval ID: oval:org.mitre.oval:def:12836
Title: Excel Heap Corruption Vulnerability
Description: Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly parse records in Excel spreadsheets, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Heap Corruption Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2011-1988
 Version: 10
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows 7
 Product(s): Microsoft Excel 2003
Microsoft Excel 2007
Microsoft Office Excel Viewer
Microsoft Office Compatibility Pack
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:12953
 
Oval ID: oval:org.mitre.oval:def:12953
Title: Excel Out of Bounds Array Indexing Vulnerability
Description: Array index error in Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Out of Bounds Array Indexing Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2011-1987
 Version: 11
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows 7
 Product(s): Microsoft Excel 2003
Microsoft Excel 2010
Microsoft Office Excel Viewer
Microsoft Office Compatibility Pack
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:12974
 
Oval ID: oval:org.mitre.oval:def:12974
Title: Excel Conditional Expression Parsing Vulnerability
Description: Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; Excel Services on Office SharePoint Server 2007 SP2; Excel Services on Office SharePoint Server 2010 Gold and SP1; and Excel Web App 2010 Gold and SP1 do not properly parse conditional expressions associated with formatting requirements, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Conditional Expression Parsing Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2011-1989
 Version: 13
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows 7
 Product(s): Microsoft Excel 2003
Microsoft Excel 2007
Microsoft Excel 2010
Microsoft Office 2007
Microsoft Office 2010
Microsoft Office Excel Viewer
Microsoft Office Compatibility Pack
Microsoft Office SharePoint Server 2007
Microsoft Office SharePoint Server 2010
Microsoft Office Web Apps 2010
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 6
Application 1
Application 2
Application 8
Application 1
Application 1
Application 4

OpenVAS Exploits

Date Description
2011-09-14 Name : Microsoft Office Excel Remote Code Execution Vulnerabilities (2587505)
File : nvt/secpod_ms11-072.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
75387 Microsoft Office Excel Unspecified Signedness Error Excel File Handling Memor...
75386 Microsoft Office Excel Unspecified Conditional Expression Parsing Excel File ...
75385 Microsoft Office Excel Unspecified Excel File Record Handling Memory Corruption
75384 Microsoft Office Excel Unspecified Array-Indexing Weakness Excel File Handlin...
75383 Microsoft Office Excel Unspecified Use-after-free Memory Dereference Excel Fi...

Information Assurance Vulnerability Management (IAVM)

Date Description
2011-09-15 IAVM : 2011-A-0124 - Multiple Vulnerabilities in Microsoft Office Excel
Severity : Category II - VMSKEY : V0030245

Snort® IPS/IDS

Date Description
2019-04-23 Microsoft Office Excel conditional code execution attempt
RuleID : 49501 - Revision : 1 - Type : FILE-OFFICE
2019-04-23 Microsoft Office Excel conditional code execution attempt
RuleID : 49500 - Revision : 1 - Type : FILE-OFFICE
2014-12-09 Microsoft Office invalid MS-OGRAPH DataFormat buffer overflow attempt
RuleID : 32377 - Revision : 4 - Type : FILE-OFFICE
2014-11-16 Microsoft Office Excel invalid Lbl record attempt
RuleID : 31579 - Revision : 3 - Type : FILE-OFFICE
2014-11-16 Microsoft Office Excel malformed chart arbitrary code execution attempt
RuleID : 31441 - Revision : 2 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel ShrFmla record use after free attempt
RuleID : 28137 - Revision : 6 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel conditional code execution attempt
RuleID : 25331 - Revision : 9 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel conditional code execution attempt
RuleID : 25330 - Revision : 9 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel invalid Lbl record
RuleID : 23533 - Revision : 5 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel invalid Lbl record
RuleID : 23532 - Revision : 5 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel invalid Lbl record
RuleID : 23531 - Revision : 5 - Type : FILE-OFFICE
2014-01-10 Microsoft Office invalid MS-OGRAPH DataFormat buffer overflow attempt
RuleID : 20128 - Revision : 20 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel Conditional Formatting record vulnerability
RuleID : 20127 - Revision : 14 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel invalid Lbl record
RuleID : 20126 - Revision : 11 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel invalid Lbl record
RuleID : 20125 - Revision : 11 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel invalid Lbl record attempt
RuleID : 20124 - Revision : 17 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel ShrFmla record use after free attempt
RuleID : 20123 - Revision : 15 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel invalid AxisParent record
RuleID : 20122 - Revision : 10 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel invalid AxisParent record
RuleID : 20121 - Revision : 10 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel malformed chart arbitrary code execution attempt
RuleID : 13981 - Revision : 22 - Type : FILE-OFFICE

Nessus® Vulnerability Scanner

Date Description
2013-01-25 Name : The remote SuSE 11 host is missing one or more security updates.
File : suse_11_puppet-120411.nasl - Type : ACT_GATHER_INFO
2011-09-14 Name : An application installed on the remote Mac OS X host is affected by multiple ...
File : macosx_ms11-072.nasl - Type : ACT_GATHER_INFO
2011-09-14 Name : Arbitrary code can be executed on the remote host through Microsoft Office.
File : smb_nt_ms11-072.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
Date Informations
2016-04-26 23:04:34
  • Multiple Updates
2014-12-09 21:25:42
  • Multiple Updates
2014-11-16 21:25:23
  • Multiple Updates
2014-06-05 21:22:35
  • Multiple Updates
2014-02-17 11:47:06
  • Multiple Updates
2014-01-19 21:30:43
  • Multiple Updates
2013-11-11 12:41:25
  • Multiple Updates
2013-05-11 00:49:53
  • Multiple Updates