NVD

Id
7706  
Name
CVE-2011-0656  
Description
Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; PowerPoint Viewer; PowerPoint Viewer 2007 SP2; and PowerPoint Web App do not properly validate PersistDirectoryEntry records in PowerPoint documents, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Slide with a malformed record, which triggers an exception and later use of an unspecified method, aka "Persist Directory RCE Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-04-13  
Modified Date
2013-01-14  
Seq
2011-0656  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
43629 7706 CVE-2011-0656 oval:org.mitre.oval:def:11761  View
43630 7706 CVE-2011-0656 MS11-022  View
43631 7706 CVE-2011-0656 20110412 ZDI-11-125: Microsoft Office PowerPoint PersistDirectoryEntry Remote Code Execution Vulnerability  View
43632 7706 CVE-2011-0656 47251  View
43633 7706 CVE-2011-0656 1025340  View
43634 7706 CVE-2011-0656 TA11-102A  View
43635 7706 CVE-2011-0656 ADV-2011-0941  View
43636 7706 CVE-2011-0656 http://www.zerodayinitiative.com/advisories/ZDI-11-125  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31249 JVNDB-2011-001489 複数の Microsoft 製品における任意のコードを実行される脆弱性 複数の Microsoft 製品は、PowerPoint ドキュメントの PersistDirectoryEntry レコードを適切に処理しないため、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態となる脆弱性が存在します。 CVE-2011-0656 48563 CVE-2011-0656 7706 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001489.html 2011-04-12 2011-05-06 View