Secunia Logo  
 Vulnerability InformationVulnerability ScanningCommunityBlogCorporate InformationOnline ShopCustomer Login  
 Secunia AdvisoriesSecunia ResearchBinary Analysis  
Home > Vulnerability Information > Secunia Advisories > Microsoft Visual Basic for Applications Buffer Overflow
Secunia Advisories
Advisories
Search
Advisories by Product
Advisories by Vendor
Historic Advisories
Mailing Lists
Report Vulnerability
Contact Form
Business Solutions Restricted
Partner Solutions Restricted
About


Secunia PSI WorldMap 		 
Microsoft Visual Basic for Applications Buffer Overflow
Secunia Advisory: SA21408
Advisory Toolbox:
Issue ticket
Save in to-do list
Mark as handled
Exploit information
Download as PDF
Review actions
Add comment
Release Date: 2006-08-08
Last Update: 2006-08-22
Popularity: 15,162 views

Critical:
Extremely critical
Impact: System access
Where: From remote
Solution Status: Vendor Patch

Software:Microsoft Access 2000
Microsoft Office 2000
Microsoft Office Project 2002
Microsoft Office XP
Microsoft Project 2000
Microsoft Visio 2002
Microsoft Visual Basic for Applications SDK 6.x
Microsoft Works Suite 2004
Microsoft Works Suite 2005
Microsoft Works Suite 2006
Secunia CVSS-2 Score: Available in Secunia business solutions

Subscribe: Instant alerts on relevant vulnerabilities


Advisory Content (Page 2 of 3)[ 1 ] [ 2 ] [ 3 ]

Solution:
Apply patches.

Microsoft Office 2000 SP3:
http://www.microsoft.com/downloads/de...=837A4FA9-FABC-4119-9AAF-2C8663029D2B

Microsoft Project 2000 SR1:
http://www.microsoft.com/downloads/de...=744DD25D-B9A7-4E30-B64E-1C9BB0F87D90

Microsoft Access 2000 Runtime SP3:
http://www.microsoft.com/downloads/de...=ED5A8C40-C592-4299-AFB2-5F0F6E2B1DCD

Microsoft Office XP SP3:
http://www.microsoft.com/downloads/de...=B26ADC3C-1DB8-46FD-8381-B199EE351E7C

Microsoft Project 2002 SP1:
http://www.microsoft.com/downloads/de...=62EF50AA-6061-4185-9713-F8C31B195103

Microsoft Visio 2002 SP2:
http://www.microsoft.com/downloads/de...=43525B6A-58B7-49C7-88D8-4983D1614A96

Microsoft Works Suite 2004:
http://www.microsoft.com/downloads/de...=B26ADC3C-1DB8-46FD-8381-B199EE351E7C

Microsoft Works Suite 2005:
http://www.microsoft.com/downloads/de...=B26ADC3C-1DB8-46FD-8381-B199EE351E7C

Microsoft Works Suite 2006:
http://www.microsoft.com/downloads/de...=B26ADC3C-1DB8-46FD-8381-B199EE351E7C

Microsoft Visual Basic for Applications SDK 6.0:
http://www.microsoft.com/downloads/de...=424DF92A-3CC4-4B72-B2F8-D45ED2A8F4B3

Microsoft Visual Basic for Applications SDK 6.2:
http://www.microsoft.com/downloads/de...=424DF92A-3CC4-4B72-B2F8-D45ED2A8F4B3

Microsoft Visual Basic for Applications SDK 6.3:
http://www.microsoft.com/downloads/de...=424DF92A-3CC4-4B72-B2F8-D45ED2A8F4B3

Microsoft Visual Basic for Applications SDK 6.4:
http://www.microsoft.com/downloads/de...=424DF92A-3CC4-4B72-B2F8-D45ED2A8F4B3

Provided and/or discovered by:
Discovered in the wild as a 0-day.

The vendor also credits Ka Chun Leung, Symantec.

Changelog:
2006-08-09: Added link to US-CERT.
2006-08-22: Added additional information.

Original Advisory:
MS06-047 (KB921645):
http://www.microsoft.com/technet/security/Bulletin/MS06-047.mspx

Other References:
US-CERT VU#159484:
http://www.kb.cert.org/vuls/id/159484

Change Page:
[ 1 ] [ 2 ] [ 3 ]


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Today
New advisories: 18
New vulnerabilities: 40
Updated advisories: 39

Less // 141 views
Fedora update for dhcp
Moderately // 146 views
Fedora update for ocaml-camlimages
Moderately // 145 views
Fedora update for libvorbis
Less // 145 views
Fedora update for wordpress-mu
Not // 156 views
Fedora update for ocaml-mysql
Not // 166 views
Fedora update for ocaml-postgresql
Highly // 197 views
Red Hat update for java-1.5.0-sun
Less // 189 views
Netgear WNDAP330 Management Frame Denial of Service
Less // 186 views
Axon Virtual PBX "/logon" Cross-Site Scripting Vulnerabilities
Moderately // 289 views
Citrix XenApp Online Plug-in / Receiver Certificate Spoofing Vulnerability

Solutions | More...  

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Sun Java JDK / JRE Multiple Vulnerabilities // 85 views
2. Internet Explorer Charset Inheritance Cross-Site Scripting Vulnerability // 71 views
3. Adobe Flash Player Multiple Vulnerabilities // 55 views
4. Microsoft Windows Win32k Kernel-Mode Driver Multiple Vulnerabilities // 50 views
5. Microsoft XML Core Services Multiple Vulnerabilities // 49 views
6. Google Chrome Two Vulnerabilities // 36 views
7. Adobe Reader/Acrobat Multiple Vulnerabilities // 36 views
8. Citrix Secure Gateway TLS Session Renegotiation Plaintext Injection // 33 views
9. Mozilla Firefox Multiple Vulnerabilities // 32 views
10. Citrix XenApp Online Plug-in / Receiver Certificate Spoofing Vulnerability // 27 views



Contact | Terms & Conditions and Copyright | Report Vulnerability | Press | Jobs (open positions) | About Secunia
Copyright Secunia 2002-2009