Check Point Advisories

Preemptive protection against Microsoft CGM File Format Memory Corruption (MS12-057; CVE-2012-2524)

Check Point Reference:	CPAI-2012-397
Date Published:	27 Aug 2012
Severity:	High
Last Updated:	Sunday 01 January, 2012
Source:	CVE-2010-3945
Protection Provided by:
Who is Vulnerable?	Microsoft Office 2007 Service Pack 2 Microsoft Office 2007 Service Pack 3 Microsoft Office 2010 Service Pack 1 (32-bit editions) Microsoft Office 2010 Service Pack 1 (64-bit editions)
Vulnerability Description	A memory corruption vulnerability has been reported in Microsoft Office.
Update/Patch Avaliable	Apply patches from: MS12-057
Vulnerability Details	The vulnerability is due to an error in the way Microsoft Office handles specially crafted Computer Graphics Metafile (CGM) files. A remote attacker can exploit this issue by enticing a target user to click on a specially crafted link. Successful exploitation would allow an attacker to execute arbitrary code on the target system.