CVE-2011-0107: Critical severity microsoft office vulnerability
Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Office Component Insecure Library Loading Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0107?
CVE-2011-0107 has a moderate severity level, enabling local users to exploit the vulnerability for privilege escalation.
How do I fix CVE-2011-0107?
To fix CVE-2011-0107, ensure that all Microsoft Office products are updated to the latest service packs and security patches.
Which versions of Microsoft Office are affected by CVE-2011-0107?
CVE-2011-0107 affects Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2.
What is the attack vector for CVE-2011-0107?
CVE-2011-0107 can be exploited by placing a Trojan horse DLL in the current working directory of a Microsoft Office application.
Who can be affected by CVE-2011-0107?
Local users who have access to the system can potentially exploit CVE-2011-0107 to gain elevated privileges.