FAQ
According to the CVSS metric, user interaction is required (UI:R). What does that mean for this vulnerability? An administrative user must be convinced to open a malicious COM object like an .rtf file.
No description was published by MSRC.