Title

Microsoft Office Security Bypass Vulnerability (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a security bypass vulnerability in an Office shared component. To exploit this vulnerability, an attacker would entice a user to view a specially crafted webpage in a web browser capable of instantiating COM components. If successfully exploited, the attacked would load additional malicious code in the process in an attempt to exploit another vulnerability and compromise the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-42585

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.