MS.Windows.OLE.Property.Remote.Code.Execution

Release Date Dec 15, 2011
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attempt to exploit a Memory Corruption vulnerability in OpenOffice. The vulnerability is caused by an error that occurs when the vulnerable software handles a maliciously crafted OLE file. It allows a remote attacker to execute arbitrary code.
Affected Products Windows XP Service Pack 3 Windows XP Professional x64 Edition Service Pack 2 Windows Server 2003 Service Pack 2 Windows Server 2003 x64 Edition Service Pack 2 Windows Server 2003 with SP2 for Itanium-based Systems
Recommended Actions Refer to the vendor's web site for a suggested workaround: http://www.microsoft.com/technet/security/Bulletin/ms11-093.mspx
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2011-3400
Reference/s http://technet.microsoft.com/en-us/security/bulletin/MS11-093.mspx (MS-ID) https://portal.telussecuritylabs.com/threat/TSL20111213-12

Fortinet