Microsoft Office Unspecified Remote Code Execution Vulnerability

Bugtraq ID:	41402
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jun 22 2010 12:00AM
Updated:	Jun 22 2010 12:00AM
Credit:	VUPEN Vulnerability Research Team
Vulnerable:	Microsoft Word 2010 0 Microsoft Office 2010 0 Microsoft Excel 2010 0
Not Vulnerable:

Microsoft Office Unspecified Remote Code Execution Vulnerability

Microsoft Office is prone to an unspecified remote code-execution vulnerability.

Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks may cause denial-of-service conditions.

Microsoft Office 2010 is vulnerable; other versions may also be affected.

Microsoft Office Unspecified Remote Code Execution Vulnerability

A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.

Microsoft Office Unspecified Remote Code Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Office Unspecified Remote Code Execution Vulnerability

References:

• Microsoft Excel Homepage (Microsoft )
  
• Microsoft Office 2010 Hit By Its First (and Second) Vulnerability (VUPEN)
  
• Microsoft Office Product Homepage (Microsoft)
  
• Microsoft Word Homepage (Microsoft )