Title

Microsoft Visual Basic for Applications Remote Code Execution Vulnerability (Cat I impact)

Discussion

Check Content

See IAVM notice and vendor bulletin for additional information. Microsoft bulletin MS12-046 (2722479) Vulnerable Applications/Systems: Office 2003 SP3 Office 2007 SP2 / SP3 Office 2010 / Office 2010 SP1 Visual Basic for Applications / Visual Basic for Applications SDK Verify the patch has been installed by checking that the following sample file is at the version indicated or later. See the vendor bulletin for additional information and any Vulnerable Applications/Systems: not listed below. Vbe6.dll Office 2003 SP3 - 6.5.10.54 Office 2007 SP2 / SP3 - 6.5.10.54 Visual Basic for Applications / Visual Basic for Applications SDK - 6.5.10.54 Acacedao.dll Office 2010 / Office 2010 SP1 - 14.0.6015.1000

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-33311

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.