CVE-2011-3261: Code Injection
Published Oct 14, 2011
·Updated
Double free vulnerability in OfficeImport in Apple iOS before 5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Excel spreadsheet.
Affected Software
29 affected components
apple iPhone OS=4.0
apple iPhone OS=4.3.2
apple iPhone OS=4.0.2
apple iPhone OS=4.0.1
apple iPhone OS=3.2
apple iPhone OS=4.2.8
apple iPhone OS=4.1
apple iPhone OS=3.1.2
apple iPhone OS=4.3.5
apple iPhone OS=3.1.3
apple iPhone OS=4.3.1
apple iPhone OS=4.2.5
apple iPhone OS=3.2.1
apple iPhone OS=3.1
apple iPhone OS=4.3.5
apple iPhone OS=3.1
apple iPhone OS=3.2
apple iPhone OS=4.3.5
apple iPhone OS=4.2.1
apple iPhone OS=3.0
apple iPhone OS=4.0.1
apple iPhone OS=4.3.3
apple iPhone OS=4.0.1
apple iPhone OS=4.0
apple iPhone OS=3.1
apple iPhone OS=4.0
apple iPhone OS=4.3.0
apple iPhone OS=3.2.1
apple iPhone OS=3.2.2
Event History
Oct 14, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-3261?
CVE-2011-3261 is classified as a high severity vulnerability due to its potential for remote code execution or denial of service.
2
How do I fix CVE-2011-3261?
To mitigate CVE-2011-3261, update your iOS to the latest version provided by Apple that addresses this vulnerability.
3
What software versions are affected by CVE-2011-3261?
CVE-2011-3261 affects multiple versions of Apple iOS including versions from 3.0 to 4.3.5.
4
What type of vulnerability is CVE-2011-3261?
CVE-2011-3261 is a double free vulnerability, which can lead to arbitrary code execution or application crashes.
5
Who can exploit CVE-2011-3261?
CVE-2011-3261 can be exploited by remote attackers through specially crafted Excel spreadsheets.