CVE-2012-1661

CRITICAL 9.3CVE-2012-1661 · Published 12/07/2012 · updated 16/06/2026

Package	Affected versions	Patched versions
arcmap esri	`≤ 10.0.2.3200`	No fix yet

Description

ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map (.mxd) file.

References

packetstormsecurity.org/files/113644/ESRI-ArcMap-Arbitrary-Code-Execution.html · Exploit
cs.umb.edu/~joecohen/exploits/CVE-2012-1661 · Exploit
exploit-db.com/exploits/19138 · Exploit
osvdb.org/82986 · Broken Link
securitytracker.com/id · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free