Secunia

Description
A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error in the VBScript and JScript scripting engines during handling of certain script requests when using OLE (Object Linking and Embedding) Automation. This can be exploited to corrupt heap memory via specially crafted script requests.

Successful exploitation allows execution of arbitrary code when a user e.g. visits a malicious website.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Ryan Smith and Alex Wheeler, IBM ISS X-Force.

Changelog
Further details available in Customer Area

Original Advisory
MS08-008 (KB947890):
http://www.microsoft.com/technet/security/Bulletin/MS08-008.mspx

IBM ISS:
http://www.iss.net/threats/285.html

Technical Analysis
Further details available in Customer Area

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area