Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do? An attacker must send a user a malicious Office file and convince them to open it. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures. Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector.
Anonymous