CVE-2011-3396

3 documents3 sources
Severity
9.3CRITICAL
EPSS
50.0%
top 2.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 14
Latest updateMay 14

Description

Untrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "PowerPoint Insecure Library Loading Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

NVDmicrosoft/powerpoint2007, 2010+1

🔴Vulnerability Details

2
GHSA
GHSA-ghqp-4wrg-9v4p: Untrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the curr2022-05-14
CVEList
CVE-2011-3396: Untrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the curr2011-12-14
CVE-2011-3396 (CRITICAL CVSS 9.3) | Untrusted search path vulnerability | cvebase.io