ID de Prueba:	1.3.6.1.4.1.25623.1.0.902178
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft Visual Basic Remote Code Execution Vulnerability (978213)
Resumen:	This host is missing a critical security update according to; Microsoft Bulletin MS10-031.
Descripción:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS10-031. Vulnerability Insight: The issue is caused by a stack memory corruption error in 'VBE6.DLL' when searching for ActiveX controls in a document that supports VBA. Vulnerability Impact: Successful exploitation will allow remote attackers to crash an affected application or execute arbitrary code by tricking a user into opening a specially crafted document. Affected Software/OS: - Microsoft Office XP SP3 and prior - Microsoft Office 2003 SP3 and prior - Microsoft Visual Basic for Applications - 2007 - Microsoft Office System SP2 and prior - Microsoft Visual Basic for Applications SDK Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0815 Cert/CC Advisory: TA10-131A http://www.us-cert.gov/cas/techalerts/TA10-131A.html Microsoft Security Bulletin: MS10-031 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-031 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7074
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.