NVD

Id
7705  
Name
CVE-2011-0655  
Description
Microsoft PowerPoint 2007 SP2 and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; PowerPoint Viewer; PowerPoint Viewer 2007 SP2; and PowerPoint Web App do not properly validate TimeColorBehaviorContainer Floating Point records in PowerPoint documents, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document containing an invalid record, aka "Floating Point Techno-color Time Bandit RCE Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-04-13  
Modified Date
2011-10-04  
Seq
2011-0655  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
43624 7705 CVE-2011-0655 oval:org.mitre.oval:def:12624  View
43625 7705 CVE-2011-0655 MS11-022  View
43626 7705 CVE-2011-0655 1025340  View
43627 7705 CVE-2011-0655 TA11-102A  View
43628 7705 CVE-2011-0655 ADV-2011-0941  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31248 JVNDB-2011-001488 複数の Microsoft 製品における任意のコードを実行される脆弱性 複数の Microsoft 製品は、PowerPoint ドキュメントの TimeColorBehaviorContainer 内にある浮動小数点のレコードを適切に処理しないため、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態となる脆弱性が存在します。 CVE-2011-0655 48562 CVE-2011-0655 7705 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001488.html 2011-04-12 2011-05-06 View