CVE

Id
55097  
CVE No.
CVE-2012-1854  
Status
Candidate  
Description
Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Visual Basic for Applications Insecure Library Loading Vulnerability," as exploited in the wild in July 2012.  
Phase
Assigned (20120322)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
576156 55097 CVE-2012-1854 MS:MS12-046  View
576157 55097 CVE-2012-1854 URL:http://technet.microsoft.com/security/bulletin/MS12-046  View
576158 55097 CVE-2012-1854 CERT:TA12-192A  View
576159 55097 CVE-2012-1854 URL:http://www.us-cert.gov/cas/techalerts/TA12-192A.html  View
576160 55097 CVE-2012-1854 OVAL:oval:org.mitre.oval:def:14950  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27339 JVNDB-2012-003046 Microsoft SharePoint 製品および Microsoft Office Web Apps におけるクロスサイトスクリプティングの脆弱性 Microsoft SharePoint 製品および Microsoft Office Web Apps の scriptresx.ashx には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-1859 55097 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003046.html  View