The weakness exists in the way that VBA looks at the properties of documents passed to it when the document is opened by a host application.
The vulnerability exists in the way Microsoft's Visual Basic for Applications checks document properties passed to it when a document is opened.