OfficeArt Shape RCE Vulnerability (CVE-2011-3413)
Publish Date: 21 juillet 2015
Gravité: : Critique
Identifiant(s) CVE: : CVE-2011-3413,MS11-094
Date du conseil: 21 juillet 2015
Description
Microsoft PowerPoint 2007 SP2; Office 2008 for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an invalid OfficeArt record in a PowerPoint document, aka "OfficeArt Shape RCE Vulnerability."
Information Exposure Rating:
Apply associated Trend Micro DPI Rules.
Solutions
Trend Micro Deep Security DPI Rule Number: 1004883
Trend Micro Deep Security DPI Rule Name: 1004883 - OfficeArt Shape RCE Vulnerability (CVE-2011-3413)
Affected software and version:
- microsoft office 2008
- microsoft office_compatibility_pack 2007
- microsoft powerpoint 2007
- microsoft powerpoint_viewer 2007