ByteOS Network

NVD Vulnerability Details :

CVE-2011-0977

Deferred

Source-cve@mitre.org

Published At-10 Feb, 2011 | 19:00

Updated At-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format, aka "Microsoft Office Graphic Object Dereferencing Vulnerability."

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Microsoft Corporation

>>excel>>2007

cpe:2.3:a:microsoft:excel:2007:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-399	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft	cve@mitre.org	N/A
http://secunia.com/advisories/43216	cve@mitre.org	N/A
http://secunia.com/advisories/44015	cve@mitre.org	N/A
http://www.securitytracker.com/id?1025343	cve@mitre.org	N/A
http://www.us-cert.gov/cas/techalerts/TA11-102A.html	cve@mitre.org	US Government Resource
http://www.vupen.com/english/advisories/2011/0942	cve@mitre.org	N/A
http://zerodayinitiative.com/advisories/ZDI-11-043/	cve@mitre.org	N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-023	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12339	cve@mitre.org	N/A
http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/43216	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/44015	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1025343	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.us-cert.gov/cas/techalerts/TA11-102A.html	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.vupen.com/english/advisories/2011/0942	af854a3a-2127-422b-91ae-364da2661108	N/A
http://zerodayinitiative.com/advisories/ZDI-11-043/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-023	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12339	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History