CVE-2011-1003

Published Feb 23, 2011 CVSS 2.0 · 6.8 Medium EPSS 4.2% KEV · Not listed
Description
Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document. NOTE: some of these details are obtained from third party information.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2011-1020 Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document. NOTE: some of these details are obtained from third party information.
Ubuntu USN Ubuntu USN USN-1076-1 ClamAV vulnerability
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 10:14 PM
Reserved
Feb 14, 2011, 12:00 AM
Status
Modified
Published
Feb 23, 2011, 7:00 PM
Modified
Jun 16, 2026, 11:28 PM