CVE-2011-0107

CVE-2011-0107 describes an untrusted search path vulnerability affecting Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2. This flaw allows a local attacker to elevate privileges by placing a malicious DLL in the same directory as an Office document, which the application then loads. With a CVSS score of 9.3, this vulnerability is considered critical due to its network-based attack vector, medium complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity and FAUCET Risk Score of 97/100, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.