CVE-2011-1003

CVE-2011-1003 describes a double-free vulnerability in libclamav (vba_read_project_strings in vba_extract.c) that could allow remote code execution via crafted VBA data in Microsoft Office documents. Affected software is ClamAV prior to version 0.97; the underlying issue is in the VBA data handli...

CVE-2011-1003

Double free vulnerability in the vbareadprojectstrings function in vbaextract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications VBA data in a Microsoft Office document. NOTE: some of these details are obtained fro...

PT-2011-2807 · Cisco +1 · Clamav +1

Name of the Vulnerable Software and Affected Versions: ClamAV versions prior to 0.97 Description: A double free vulnerability exists in the vba read project strings function in vba extract.c in libclamav. This issue might allow remote attackers to execute arbitrary code via crafted Visual Basic f...