CVE-2011-1003

Description

Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document. NOTE: some of these details are obtained from third party information.

Category

6.8
CVSS
Severity: Medium
CVSS 2.0 •
EPSS 6.58% Top 10%
Vendor Advisory opensuse.org Vendor Advisory mandriva.com Vendor Advisory fedoraproject.org Vendor Advisory ubuntu.com Vendor Advisory fedoraproject.org Vendor Advisory secunia.com Vendor Advisory vupen.com Vendor Advisory vupen.com
Affected: n/a n/a
Published at:
Updated at:

References

Link Tags
http://securitytracker.com/id?1025100 vdb entry
http://www.securityfocus.com/bid/46470 vdb entry
http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob%3Bf=ChangeLog%3Bhb=clamav-0.97
http://osvdb.org/70937 vdb entry
http://openwall.com/lists/oss-security/2011/02/21/1 mailing list
http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commit%3Bh=d21fb8d975f8c9688894a8cef4d50d977022e09f
https://exchange.xforce.ibmcloud.com/vulnerabilities/65544 vdb entry
http://www.vupen.com/english/advisories/2011/0458 vdb entry vendor advisory
http://secunia.com/advisories/43752 third party advisory
http://www.vupen.com/english/advisories/2011/0453 vdb entry vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html vendor advisory
http://www.mandriva.com/en/support/security/advisories/?name=MDVA-2011:007 vendor advisory
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2486
http://www.vupen.com/english/advisories/2011/0523 vdb entry
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055777.html vendor advisory
http://www.ubuntu.com/usn/USN-1076-1 vendor advisory
http://openwall.com/lists/oss-security/2011/02/21/4 mailing list
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055771.html vendor advisory
http://secunia.com/advisories/43392 third party advisory vendor advisory
http://secunia.com/advisories/43498 third party advisory

Frequently Asked Questions

What is the severity of CVE-2011-1003?
CVE-2011-1003 has been scored as a medium severity vulnerability.
How to fix CVE-2011-1003?
To fix CVE-2011-1003, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2011-1003 being actively exploited in the wild?
It is possible that CVE-2011-1003 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~7% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.