[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247862

 
 

909

 
 

194603

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Remote code execution vulnerability in Microsoft Visual Basic for Applications while handling dll files

ID: oval:org.secpod.oval:def:6351Date: (C)2012-07-11   (M)2024-02-29
Class: VULNERABILITYFamily: windows




The host is installed with Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA) and is prone to a remote code execution vulnerability. A flaw is present in the applications, which fail to properly handle the loading of DLL files. Successful exploitation could allow attackers to execute arbitrary code.

Platform:
Microsoft Windows Server 2019
Microsoft Windows Server 2016
Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows 10
Microsoft Windows Server 2008
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Microsoft Windows XP
Microsoft Windows Server 2008 R2
Product:
Microsoft Office 2003
Microsoft Office 2007
Microsoft Office 2010
Microsoft Visual Basic for Applications
Reference:
CVE-2012-1854
CVE    1
CVE-2012-1854
CPE    12
cpe:/a:microsoft:visual_basic_for_applications:6.0
cpe:/a:microsoft:office:2003:sp3
cpe:/a:microsoft:office:2010:sp1
cpe:/a:microsoft:office:2007
...

© SecPod Technologies