CVE-2011-0107
Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 11.1%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Office Component Insecure Library Loading Vulnerability."
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 11.11% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/office
- Source
- secure@microsoft.com
References
- http://osvdb.org/71767
- http://secunia.com/advisories/44015
- http://www.fortiguard.com/advisory/FGA-2011-13.html
- http://www.securityfocus.com/bid/47246
- http://www.securitytracker.com/id?1025343
- http://www.us-cert.gov/cas/techalerts/TA11-102A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2011/0942
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-023
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12655
- http://osvdb.org/71767
- http://secunia.com/advisories/44015
- http://www.fortiguard.com/advisory/FGA-2011-13.html
- http://www.securityfocus.com/bid/47246
- http://www.securitytracker.com/id?1025343
- http://www.us-cert.gov/cas/techalerts/TA11-102A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2011/0942
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-023
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12655
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.