Lucene search

K
cve[email protected]CVE-2011-3261
HistoryOct 14, 2011 - 10:55 a.m.

CVE-2011-3261

2011-10-1410:55:10
CWE-94
web.nvd.nist.gov
23
cve-2011-3261
double free vulnerability
officeimport
apple ios
remote attackers
arbitrary code
denial of service
application crash
excel spreadsheet

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.3%

Double free vulnerability in OfficeImport in Apple iOS before 5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Excel spreadsheet.

Affected configurations

NVD
Node
appleiphone_osMatch3.0-iphone
OR
appleiphone_osMatch3.1
OR
appleiphone_osMatch3.1-iphone
OR
appleiphone_osMatch3.1-ipodtouch
OR
appleiphone_osMatch3.1.2-iphone
OR
appleiphone_osMatch3.1.3-iphone
OR
appleiphone_osMatch3.2-iphone
OR
appleiphone_osMatch3.2-ipodtouch
OR
appleiphone_osMatch3.2.1
OR
appleiphone_osMatch3.2.1-ipad
OR
appleiphone_osMatch3.2.2
OR
appleiphone_osMatch4.0
OR
appleiphone_osMatch4.0-iphone
OR
appleiphone_osMatch4.0-ipodtouch
OR
appleiphone_osMatch4.0.1
OR
appleiphone_osMatch4.0.1-iphone
OR
appleiphone_osMatch4.0.1-ipodtouch
OR
appleiphone_osMatch4.0.2
OR
appleiphone_osMatch4.1
OR
appleiphone_osMatch4.2.1
OR
appleiphone_osMatch4.2.5
OR
appleiphone_osMatch4.2.8
OR
appleiphone_osMatch4.3.0
OR
appleiphone_osMatch4.3.1
OR
appleiphone_osMatch4.3.2
OR
appleiphone_osMatch4.3.3
OR
appleiphone_osMatch4.3.5
OR
appleiphone_osMatch4.3.5-ipad
OR
appleiphone_osMatch4.3.5-ipodtouch

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.3%