{"cvss":0.0,"datePublished":"2013-12-10T00:00:00Z","dateUpdated":"2013-12-10T00:00:00Z","description":"hxds.dll in Microsoft Office 2007 SP3 and 2010 SP1 and SP2 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted COM component on a web site that is visited with Internet Explorer, as exploited in the wild in December 2013, aka \"HXDS ASLR Vulnerability.\"","dueDate":"","id":"CVE-2013-5057","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Office","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Microsoft Office 2007 SP3 and 2010 SP1 and SP2 HXDS ASLR Vulnerability","vendor":"Microsoft"}