CVE-2011-3260: Code Injection
Published Oct 14, 2011
·Updated
Buffer overflow in OfficeImport in Apple iOS before 5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Word document.
Affected Software
29 affected components
apple iPhone OS=4.0
apple iPhone OS=4.3.2
apple iPhone OS=4.0.2
apple iPhone OS=4.0.1
apple iPhone OS=3.2
apple iPhone OS=4.2.8
apple iPhone OS=4.1
apple iPhone OS=3.1.2
apple iPhone OS=4.3.5
apple iPhone OS=3.1.3
apple iPhone OS=4.3.1
apple iPhone OS=4.2.5
apple iPhone OS=3.2.1
apple iPhone OS=3.1
apple iPhone OS=4.3.5
apple iPhone OS=3.1
apple iPhone OS=3.2
apple iPhone OS=4.3.5
apple iPhone OS=4.2.1
apple iPhone OS=3.0
apple iPhone OS=4.0.1
apple iPhone OS=4.3.3
apple iPhone OS=4.0.1
apple iPhone OS=4.0
apple iPhone OS=3.1
apple iPhone OS=4.0
apple iPhone OS=4.3.0
apple iPhone OS=3.2.1
apple iPhone OS=3.2.2
Event History
Oct 14, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-3260?
CVE-2011-3260 is considered a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary code.
2
How do I fix CVE-2011-3260?
To fix CVE-2011-3260, users should update their iOS devices to version 5.0 or later.
3
What types of attacks can exploit CVE-2011-3260?
CVE-2011-3260 can be exploited via crafted Microsoft Word documents, leading to arbitrary code execution or denial of service.
4
Which versions of iOS are affected by CVE-2011-3260?
CVE-2011-3260 affects multiple iOS versions including 3.0 through 4.3.5.
5
What are the symptoms of exploitation of CVE-2011-3260?
Symptoms of exploitation of CVE-2011-3260 may include application crashes and unexpected behavior when opening malicious documents.