![Trend Micro Security](https://www.trendmicro.com/content/dam/trendmicro/global/en/global/logo/logo-desktop.png)
MS12-022:Expression Design の脆弱性により、リモートでコードが実行される (2651018)
2012年3月14日
危険度: : 高
CVE識別番号: CVE-2012-0016
概要
This security update resolves one privately reported vulnerability in Microsoft Expression Design. The vulnerability could allow remote code execution if a user opens a legitimate file (such as an .xpr or .DESIGN file) that is located in the same network directory as a specially crafted dynamic link library (DLL) file. Then, while opening the legitimate file, Microsoft Expression Design could attempt to load the DLL file and execute any code it contained. For an attack to be successful, a user must visit an untrusted remote file system location or WebDAV share and open a legitimate file (such as an .xpr or .DESIGN file) from this location that is then loaded by a vulnerable application.
トレンドマイクロの対策
詳しい情報については以下のサイトをご参照ください。
影響を受けるソフトウェア
- Microsoft Expression Design (KB2675064)
- Microsoft Expression Design Service Pack 1 (KB2667724)
- Microsoft Expression Design 2 (KB2667725)
- Microsoft Expression Design 3 (KB2667727)
- Microsoft Expression Design 4 (KB2667730)