OfficeArt Shape RCE Vulnerability (CVE-2011-3413)

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: CRITICAL

  CVE Identifier: CVE-2011-3413,MS11-094

  Advisory Date: JUL 21, 2015

---

  DESCRIPTION

Microsoft PowerPoint 2007 SP2; Office 2008 for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an invalid OfficeArt record in a PowerPoint document, aka "OfficeArt Shape RCE Vulnerability."

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1004883

  Trend Micro Deep Security DPI Rule Name: 1004883 - OfficeArt Shape RCE Vulnerability (CVE-2011-3413)

  AFFECTED SOFTWARE AND VERSION

• microsoft office 2008
• microsoft office_compatibility_pack 2007
• microsoft powerpoint 2007
• microsoft powerpoint_viewer 2007