System Compromise: Remote attackers can gain control of vulnerable systems.
Description
This indicates an attempt to exploit a memory-corruption vulnerability in the ActiveX Control of Microsoft Office Web Components.
The vulnerability is caused by an error that occurs when the vulnerable software handles malicious parameters of the methods "AddIn" and "Evaluate". It may allow a remote attacker to execute arbitrary code.
Affected Products
Microsoft Office 2003 Service Pack 3
Recommended Actions
Please refer to Microsoft advisory for patches or updates: http://www.microsoft.com/technet/security/Bulletin/ms09-043.mspx