CVE

Id
43399  
CVE No.
CVE-2010-0815  
Status
Candidate  
Description
VBE6.DLL in Microsoft Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Visual Basic for Applications (VBA), and VBA SDK 6.3 through 6.5 does not properly search for ActiveX controls that are embedded in documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "VBE6.DLL Stack Memory Corruption Vulnerability."  
Phase
Assigned (20100302)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
472687 43399 CVE-2010-0815 MS:MS10-031  View
472688 43399 CVE-2010-0815 URL:http://www.microsoft.com/technet/security/Bulletin/MS10-031.mspx  View
472689 43399 CVE-2010-0815 CERT:TA10-131A  View
472690 43399 CVE-2010-0815 URL:http://www.us-cert.gov/cas/techalerts/TA10-131A.html  View
472691 43399 CVE-2010-0815 OVAL:oval:org.mitre.oval:def:7074  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35817 JVNDB-2010-001597 複数の Microsoft 製品の Windows OpenType Compact Font Format ドライバにおける任意のコードを実行される脆弱性 複数の Microsoft 製品の Windows OpenType Compact Font Format (CFF) ドライバには、ユーザモードからカーネルモードへデータをコピーする処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2010-0819 43399 7.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001597.html  View