Untrusted Search Path Vulnerability in Microsoft Office Products

CVE-2012-1854

Summary

This vulnerability affects Microsoft Office components, specifically through the VBE6.dll and allows local users to exploit the system by placing a malicious DLL in the current working directory. This can lead to privilege escalation, particularly through the execution of crafted .docx files. The flaw was publicly exploited in July 2012, highlighting the risks associated with insecure library loading in Microsoft Visual Basic for Applications.

References