CVE-2012-1661 ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a cr...
HighCVSS 9.3
EPSS 23.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map (.mxd) file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| esri arcmap | <= 10.0.2.3200 | No fix listed |
References
- packetstormsecurity.org exploit
- www.cs.umb.edu exploit
- 19138 exploit third-party-advisory vdb-entry
- 82986 broken-link vdb-entry
- 1027170 exploit third-party-advisory vdb-entry