CVE-2013-5057

The CVE-2013-5057 issue affects hxds.dll in Microsoft Office 2007 SP3 and Office 2010 SP1/SP2. The root cause is that hxds.dll does not implement ASLR, enabling remote attackers to execute arbitrary code via a crafted COM component on a web site viewed with Internet Explorer; this was observed in...