MS.Windows.VBE6.DLL.Stack.Memory.Corruption

Release Date May 12, 2010
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a stack-based memory-corruption vulnerability in Microsoft Windows. The vulnerability is caused by an error when VBE6.DLL is referenced by a malformed Office document. It may allow remote attackers to execute arbitrary code by sending a specially crafted Office document.
Affected Products Microsoft Office XP Service Pack 3 Microsoft Office 2003 Service Pack 3 2007 Microsoft Office System Service Pack 1 and 2007 Microsoft Office System Service Pack 2 Microsoft Visual Basic for Applications Microsoft Visual Basic for Applications SDK
Recommended Actions Refer to the vendor's web site for the suggested workaround: http://www.microsoft.com/technet/security/Bulletin/ms10-031.mspx
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2010-0815
Reference/s http://technet.microsoft.com/en-us/security/bulletin/MS10-031.mspx (MS-ID)

Fortinet