Intrusion PreventionMS.Office.Web.Components.Memory.Corruption
Description
This indicates an attempt to exploit a memory-corruption vulnerability in the ActiveX Control of Microsoft Office Web Components.
The vulnerability is caused by an error that occurs when the vulnerable software handles malicious parameters of the methods "AddIn" and "Evaluate". It may allow a remote attacker to execute arbitrary code.
Affected Products
Microsoft Office 2003 Service Pack 3
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Please refer to Microsoft advisory for patches or updates:
http://www.microsoft.com/technet/security/Bulletin/ms09-043.mspx
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 17169 |
| Created | May 14, 2009 |
| Updated | Jan 13, 2022 |
| Risk |
|
| CVE ID | CVE-2009-1136 |
| Exploit Prediction Score | 96.8% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | MS_Office |