CVE-2011-0107

🗓️ 13 Apr 2011 18:00:00Reported by microsoftType

Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Office Component Insecure Library Loading Vulnerability.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2011-5157	6 Sep 201210:41	–	attackerkb
Check Point Advisories	Microsoft Word .docx Insecure Library Loading (MS11-023; CVE-2011-0107)	7 Apr 201100:00	–	checkpoint_advisories
CVE	CVE-2011-0107	13 Apr 201118:00	–	cve
NVD	CVE-2011-0107	13 Apr 201118:55	–	nvd
OpenVAS	Microsoft Office Remote Code Execution Vulnerabilities (2489293)	13 Apr 201100:00	–	openvas
OpenVAS	Microsoft Office Remote Code Execution Vulnerabilities (2489293)	13 Apr 201100:00	–	openvas
Prion	Design/Logic Flaw	13 Apr 201118:55	–	prion
Prion	Sql injection	6 Sep 201210:41	–	prion
securityvulns	Microsoft Office multiple security vulnerabilities	17 Apr 201100:00	–	securityvulns
Tenable Nessus	MS11-023: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2489293)	13 Apr 201100:00	–	nessus

Source	Link
securityfocus	www.securityfocus.com/bid/47246
us-cert	www.us-cert.gov/cas/techalerts/TA11-102A.html
osvdb	www.osvdb.org/71767
vupen	www.vupen.com/english/advisories/2011/0942
secunia	www.secunia.com/advisories/44015
securitytracker	www.securitytracker.com/id
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12655
fortiguard	www.fortiguard.com/advisory/FGA-2011-13.html
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-023

12 Oct 2018 19:57Current

6.2Medium risk

Vulners AI Score6.2

EPSS0.51718