Microsoft Office XML Converter for Mac Local Privilege Escalation Vulnerability
BID:40533
Info
Microsoft Office XML Converter for Mac Local Privilege Escalation Vulnerability
| Bugtraq ID: | 40533 |
| Class: | Design Error |
| CVE: |
CVE-2010-1254 |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 08 2010 12:00AM |
| Updated: | Jun 15 2010 04:09PM |
| Credit: | Rick Glaspie of Gilbert Public Schools in Gilbert, AZ |
| Vulnerable: |
Microsoft Open XML File Format Converter for Mac 0 Avaya Messaging Application Server MM 3.1 Avaya Messaging Application Server MM 3.0 Avaya Messaging Application Server MM 2.0 Avaya Messaging Application Server MM 1.1 Avaya Messaging Application Server 5 Avaya Messaging Application Server 4 Avaya Messaging Application Server 0 Avaya Meeting Exchange - Webportal 6.0 Avaya Meeting Exchange - Web Conferencing Server 0 Avaya Meeting Exchange - Streaming Server 0 Avaya Meeting Exchange - Recording Server 0 Avaya Meeting Exchange - Client Registration Server 0 |
| Not Vulnerable: | |
Discussion
Microsoft Office XML Converter for Mac Local Privilege Escalation Vulnerability
Microsoft Office XML Converter for Mac is prone to a local privilege-escalation vulnerability that affects filesystem Access Control Lists (ACLs).
A local attacker can exploit this issue to execute arbitrary code with superuser privileges. Successful exploits may result in the complete compromise of affected computers.
Microsoft Office XML Converter for Mac is prone to a local privilege-escalation vulnerability that affects filesystem Access Control Lists (ACLs).
A local attacker can exploit this issue to execute arbitrary code with superuser privileges. Successful exploits may result in the complete compromise of affected computers.
Exploit / POC
Microsoft Office XML Converter for Mac Local Privilege Escalation Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Microsoft Office XML Converter for Mac Local Privilege Escalation Vulnerability
Solution:
The vendor has released an advisory and updates. Please see the references for details.
Microsoft Open XML File Format Converter for Mac 0
Solution:
The vendor has released an advisory and updates. Please see the references for details.
Microsoft Open XML File Format Converter for Mac 0
-
Microsoft Open XML File Format Converter for Mac 1.1.5
http://www.microsoft.com/downloads/details.aspx?FamilyID=b6ca7b05-cf97 -43a2-95eb-7b5caf7c1528
References
Microsoft Office XML Converter for Mac Local Privilege Escalation Vulnerability
References:
References:
- Mactopia Homepage (Microsoft)
- Microsoft Excel Homepage (Microsoft )
- ASA-2010-161 MS10-038 Vulnerabilities in Microsoft Office Excel Could Allow Remo (Avaya)
- Microsoft Security Bulletin MS10-038 (Microsoft)