Description: A vulnerability has been identified in Microsoft Visual Basic for Applications (VBA) allowing malicious Office or HTML documents to cause a buffer overflow.
The problem is that VBA (VBE.DLL and VBE6.DLL) doesn't check the "ID" parameter properly before processing the document. This allows malicious people to create a document, which could cause a buffer overflow and execute arbitrary code.
This affects all programs, which use VBA to process documents. This includes Internet Explorer if Microsoft Office programs are installed because Office documents are automatically opened with a helper application.
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
