Release DateDec 15, 2011 |
Severityhigh |
ImpactSystem Compromise: Remote attackers can gain control of vulnerable systems |
DescriptionThis indicates an attack attempt to exploit a Memory Corruption vulnerability in Microsoft Office.The vulnerability is due to an error when the vulnerable software handles a maliciously crafted Excel file. As a result, a remote attacker can exploit this to execute arbitrary code, via a crafted Excel file. |
Affected ProductsMicrosoft Office 2003 Service Pack 3Microsoft Office 2004 for Mac |
Recommended ActionsApply the most recent upgrade or patch from the vendor.http://www.microsoft.com/technet/security/Bulletin/MS11-096.mspx |
Coverage IPS
VCM |
Common Vulnerabilities and Exposures (CVE)CVE-2011-3403 |
Reference/shttp://technet.microsoft.com/en-us/security/bulletin/MS11-096.mspx (MS-ID) |