Detections
Analytics
MS11-021: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2489279)
high Nessus Plugin ID 53378
Language:
Synopsis
Arbitrary code can be executed on the remote host through Microsoft Excel.Description
The remote Windows host is running a version of Microsoft Excel or Excel Viewer that is affected by several vulnerabilities.If an attacker can trick a user on the affected host into opening a specially crafted Excel file, they could leverage this issue to execute arbitrary code subject to the user's privileges.
Solution
Microsoft has released a set of patches for Office XP, 2003, 2007, 2010, Excel Viewer, and Office Compatability Pack.See Also
https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2011/ms11-021
Plugin Details
Severity: High
ID: 53378
File Name: smb_nt_ms11-021.nasl
Version: 1.27
Type: local
Agent: windows
Family: Windows : Microsoft Bulletins
Published: 4/13/2011
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.6
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 8.1
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:microsoft:office, cpe:/a:microsoft:excel_viewer, cpe:/a:microsoft:excel, cpe:/a:microsoft:office_compatibility_pack
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 4/12/2011
Vulnerability Publication Date: 2/7/2011
Exploitable With
CANVAS (White_Phosphorus)
Core Impact
Metasploit (MS11-021 Microsoft Office 2007 Excel .xlb Buffer Overflow)
Reference Information
CVE: CVE-2011-0097, CVE-2011-0098, CVE-2011-0101, CVE-2011-0103, CVE-2011-0104, CVE-2011-0105, CVE-2011-0978, CVE-2011-0979, CVE-2011-0980
BID: 46225, 46226, 46229, 47201, 47235, 47243, 47244, 47245, 47256