Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format, aka "Microsoft Office Graphic Object Dereferencing Vulnerability."
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.us-cert.gov/cas/techalerts/TA11-102A.html | third-party-advisory x_refsource_CERT |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-023 | vendor-advisory x_refsource_MS |
| http://secunia.com/advisories/43216 | third-party-advisory x_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2011/0942 | vdb-entry x_refsource_VUPEN |
| http://zerodayinitiative.com/advisories/ZDI-11-043/ | x_refsource_MISC |
| http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft | x_refsource_MISC |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12339 | vdb-entry signature x_refsource_OVAL |
| http://secunia.com/advisories/44015 | third-party-advisory x_refsource_SECUNIA |
| http://www.securitytracker.com/id?1025343 | vdb-entry x_refsource_SECTRACK |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.us-cert.gov/cas/techalerts/TA11-102A.html | third-party-advisory x_refsource_CERT x_transferred |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-023 | vendor-advisory x_refsource_MS x_transferred |
| http://secunia.com/advisories/43216 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.vupen.com/english/advisories/2011/0942 | vdb-entry x_refsource_VUPEN x_transferred |
| http://zerodayinitiative.com/advisories/ZDI-11-043/ | x_refsource_MISC x_transferred |
| http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft | x_refsource_MISC x_transferred |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12339 | vdb-entry signature x_refsource_OVAL x_transferred |
| http://secunia.com/advisories/44015 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.securitytracker.com/id?1025343 | vdb-entry x_refsource_SECTRACK x_transferred |