Lucene search

K
cveMicrosoftCVE-2011-3396
HistoryDec 14, 2011 - 12:55 a.m.

CVE-2011-3396

2011-12-1400:55:01
microsoft
web.nvd.nist.gov
35
microsoft
powerpoint
2007
2010
untrusted search path
vulnerability
local users
privileges
trojan horse dll

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

Low

EPSS

0.889

Percentile

98.8%

Untrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka β€œPowerPoint Insecure Library Loading Vulnerability.”

Affected configurations

Nvd
Node
microsoftpowerpointMatch2007sp2
OR
microsoftpowerpointMatch2010x32
OR
microsoftpowerpointMatch2010x64
VendorProductVersionCPE
microsoftpowerpoint2007cpe:2.3:a:microsoft:powerpoint:2007:sp2:*:*:*:*:*:*
microsoftpowerpoint2010cpe:2.3:a:microsoft:powerpoint:2010:*:x32:*:*:*:*:*
microsoftpowerpoint2010cpe:2.3:a:microsoft:powerpoint:2010:*:x64:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

Low

EPSS

0.889

Percentile

98.8%