This host is missing a critical security update according to Microsoft Bulletin MS10-036.

Successful exploitation could allow an attacker to execute arbitrary code on the remote system. Impact Level: Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link. http://www.microsoft.com/technet/security/bulletin/ms10-036.mspx

The flaw is caused by an error when validating COM (Component Object Model) object instantiation, which could allow attackers to execute arbitrary code by tricking a user into opening a specially crafted Excel, PowerPoint, Publisher, Visio, or Word file.

Microsoft Office 2003 SP3. Microsoft Office Word 2007 SP2 and prior. Microsoft Office Word 2003 SP3 and prior. Microsoft Office Excel 2003 SP3 and prior. Microsoft Office Excel 2007 SP2 and prior. Microsoft Office Visio 2007 SP2 and prior. Microsoft Office Visio 2003 SP3 and prior. 2007 Microsoft Office System SP2 and prior. Microsoft Office Publisher 2003 SP3 and prior. Microsoft Office Publisher 2003 SP3 and prior. Microsoft Office PowerPoint 2003 SP3 and prior. Microsoft Office PowerPoint 2007 SP2 and prior.

• http://www.microsoft.com/technet/security/bulletin/ms10-036.mspx
• http://www.vupen.com/english/advisories/2010/1393

---

Updated on 2015-03-25