Intrusion PreventionMS.Office.Art.Drawing.Remote.Code.Execution
Description
This indicates an attempt to exploit a remote code execution vulnerability in MSO.DLL which affects Microsoft Office.
The vulnerability is caused by an error that occurs when the vulnerable software handles malicious Office Art drawing containers in Excel/Word file. It allows a remote attacker to execute arbitrary code via sending a crafted Excel/Word file.
Affected Products
Microsoft Office 2000
Microsoft Office XP
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
http://www.microsoft.com/technet/security/Bulletin/MS09-062.mspx
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 17812 |
| Created | Oct 14, 2009 |
| Updated | Feb 24, 2022 |
| Risk |
|
| CVE ID | CVE-2009-2528 |
| Exploit Prediction Score | 82.03% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | MS_Office |