Excel Use after Free WriteAV Vulnerability (CVE-2011-1986)

  Severity: CRITICAL
  CVE Identifier: CVE-2011-1986,MS11-072
  Advisory Date: JUL 21, 2015

  DESCRIPTION

Use-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Use after Free WriteAV Vulnerability."

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1004792
  Trend Micro Deep Security DPI Rule Name: 1004792 - Excel Use After Free WriteAV Vulnerability (CVE-2011-1986)

  AFFECTED SOFTWARE AND VERSION

  • microsoft excel 2003