What is the severity of CVE-2011-0107?

CVE-2011-0107 has a moderate severity level, enabling local users to exploit the vulnerability for privilege escalation.

How do I fix CVE-2011-0107?

To fix CVE-2011-0107, ensure that all Microsoft Office products are updated to the latest service packs and security patches.

Which versions of Microsoft Office are affected by CVE-2011-0107?

CVE-2011-0107 affects Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2.

What is the attack vector for CVE-2011-0107?

CVE-2011-0107 can be exploited by placing a Trojan horse DLL in the current working directory of a Microsoft Office application.

Who can be affected by CVE-2011-0107?

Local users who have access to the system can potentially exploit CVE-2011-0107 to gain elevated privileges.

Vulnerability/
CVE-2011-0107

critical

9.3

CWE

NVD-CWE-Other

13/4/2011

6/8/2024

CVE-2011-0107

First published: Wed Apr 13 2011(Updated: )

Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Office Component Insecure Library Loading Vulnerability."

Credit: secure@microsoft.com

Affected Software	Affected Version	How to fix
Microsoft Office	=xp-sp3
Microsoft Office	=2007-sp2
Microsoft Office	=2003-sp3

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2011-0107?
CVE-2011-0107 has a moderate severity level, enabling local users to exploit the vulnerability for privilege escalation.
How do I fix CVE-2011-0107?
To fix CVE-2011-0107, ensure that all Microsoft Office products are updated to the latest service packs and security patches.
Which versions of Microsoft Office are affected by CVE-2011-0107?
CVE-2011-0107 affects Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2.
What is the attack vector for CVE-2011-0107?
CVE-2011-0107 can be exploited by placing a Trojan horse DLL in the current working directory of a Microsoft Office application.
Who can be affected by CVE-2011-0107?
Local users who have access to the system can potentially exploit CVE-2011-0107 to gain elevated privileges.

collector/nvd-historical
collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/references
agent/author
agent/weakness
agent/severity
agent/tags
agent/first-publish-date
agent/event
agent/description
agent/source
vendor/microsoft
canonical/microsoft office
version/microsoft office/xp-sp3
version/microsoft office/2007-sp2
version/microsoft office/2003-sp3

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2011-0107?
CVE-2011-0107 has a moderate severity level, enabling local users to exploit the vulnerability for privilege escalation.
How do I fix CVE-2011-0107?
To fix CVE-2011-0107, ensure that all Microsoft Office products are updated to the latest service packs and security patches.
Which versions of Microsoft Office are affected by CVE-2011-0107?
CVE-2011-0107 affects Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2.
What is the attack vector for CVE-2011-0107?
CVE-2011-0107 can be exploited by placing a Trojan horse DLL in the current working directory of a Microsoft Office application.
Who can be affected by CVE-2011-0107?
Local users who have access to the system can potentially exploit CVE-2011-0107 to gain elevated privileges.