(MS11-023) Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2489293)
Severity: HIGH
CVE Identifier: CVE-2011-0977,CVE-2011-0107
Advisory Date: JUN 17, 2011
DESCRIPTION
This security update addresses two vulnerabilities in Microsoft Office, which could allow remote code execution. A remote malicious user could gain the same user rights as the logged on user if a user opens a specially crafted Office file. In addition, when a user opens a legitimate Office file located in the same network directory as a specially crafted library file, it could also allow remote code execution.
TREND MICRO PROTECTION INFORMATION
For information on patches specific to the affected software, please proceed to the Microsoft Web page.
AFFECTED SOFTWARE AND VERSION
- Microsoft Office XP Service Pack 3
- Microsoft Office 2003 Service Pack 3
- Microsoft Office 2007 Service Pack 2
- Microsoft Office 2004 for Mac
- Microsoft Office 2008 for Mac
- Open XML File Format Converter for Mac