CVE-2013-3859

Name of the Vulnerable Software and Affected Versions Microsoft Pinyin IME 2010 Microsoft Office 2010 SP1

Description The issue arises when Microsoft Pinyin IME 2010 is used with Microsoft Office 2010 SP1, as it fails to properly restrict configuration options. This allows local users to gain privileges by starting Internet Explorer from the IME toolbar.

Recommendations For Microsoft Pinyin IME 2010, avoid starting Internet Explorer from the IME toolbar until a fix is available. For Microsoft Office 2010 SP1, restrict the use of the IME toolbar in conjunction with Internet Explorer to minimize the risk of exploitation.