CVE-2011-1003

MEDIUM · CVSS 6.8 EPSS 4.21%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2011-02-23 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2011-1003

Severity

MEDIUM

CVSS

6.8

EPSS

4.21%

Microsoft Office

Original Filing — NVD Description

Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document. NOTE: some of these details are obtained from third party information.