CISA hat am 13.04.2026 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 27.04.2026.
Erforderliche Maßnahme: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://learn.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-046 ; https://nvd.nist.gov/vuln/detail/CVE-2012-1854
Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Visual Basic for Applications Insecure Library Loading Vulnerability," as exploited in the wild in July 2012.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| microsoft | office | 2003 | |
| microsoft | visual basic for applications | — | |
| microsoft | visual basic for applications sdk | — |
cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*cpe:2.3:a:microsoft:office:2010:-:*:*:*:*:x64:*cpe:2.3:a:microsoft:office:2010:-:*:*:*:*:x86:*cpe:2.3:a:microsoft:office:2010:sp1:*:*:*:*:x64:*cpe:2.3:a:microsoft:office:2010:sp1:*:*:*:*:x86:*cpe:2.3:a:microsoft:visual_basic_for_applications:*:*:*:*:*:*:*:*cpe:2.3:a:microsoft:visual_basic_for_applications_sdk:*:*:*:*:*:*:*:*Unser kostenloser Open-Source-Honeypot wartet auf Ports, die Ihr Server nicht nutzt, und meldet verbindende Scanner und Angreifer an eine gemeinsame Blockliste.