Anfälligkeitssuche        Suche in 187964 CVE Beschreibungen
und 85075 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.801597
Kategorie:Windows
Titel:Microsoft Office Excel 2003 Invalid Object Type Remote Code Execution Vulnerability
Zusammenfassung:This host is installed with Microsoft Office Excel and is prone; to multiple remote code execution vulnerability.;; This NVT has been replaced by NVT (OID:1.3.6.1.4.1.25623.1.0.902410).
Beschreibung:Summary:
This host is installed with Microsoft Office Excel and is prone
to multiple remote code execution vulnerability.

This NVT has been replaced by NVT (OID:1.3.6.1.4.1.25623.1.0.902410).

Vulnerability Insight:
The flaw occurs when parsing a document with a malformed Excel
document. When parsing an office art object, the application fails to put appropriate trust parameters.

Vulnerability Impact:
Successful exploitation will allow attacker to execute arbitrary
codes, cause memory corruption and other attacks in the context of the
application through crafting malicious codes inside a Excel file.

Affected Software/OS:
Microsoft Office Excel 2003.

Solution:
No known solution was made available for at least one year since the disclosure
of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer
release, disable respective features, remove the product or replace the product by another one.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2011-0980
Cert/CC Advisory: TA11-102A
http://www.us-cert.gov/cas/techalerts/TA11-102A.html
http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft
http://zerodayinitiative.com/advisories/ZDI-11-040/
Microsoft Security Bulletin: MS11-021
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-021
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12018
http://www.securitytracker.com/id?1025337
http://secunia.com/advisories/39122
http://secunia.com/advisories/43210
http://www.vupen.com/english/advisories/2011/0940
CopyrightCopyright (C) 2011 Greenbone Networks GmbH

Dies ist nur einer von 85075 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2020 E-Soft Inc. Alle Rechte vorbehalten.