This host is missing a critical security update according to Microsoft Bulletin MS10-031.

Successful exploitation will allow remote attackers to crash an affected application or execute arbitrary code by tricking a user into opening a specially crafted document. Impact Level: System/Apllication

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://www.microsoft.com/technet/security/bulletin/ms10-031.mspx

The issue is caused by a stack memory corruption error in 'VBE6.DLL' when searching for ActiveX controls in a document that supports VBA.

Microsoft Office XP SP3 and prior. Microsoft Office 2003 SP3 and prior. Microsoft Visual Basic for Applications. 2007 Microsoft Office System SP2 and prior. Microsoft Visual Basic for Applications SDK.

• http://support.microsoft.com/kb/974945
• http://support.microsoft.com/kb/976321
• http://support.microsoft.com/kb/976380
• http://support.microsoft.com/kb/976382
• http://www.microsoft.com/technet/security/bulletin/MS10-031.mspx
• http://www.vupen.com/english/advisories/2010/1121

---

Updated on 2015-03-25