Description

Remote Data Services (RDS) which is part of Microsoft Data Access Components (MDAC) contains a buffer overflow allowing attackers to run arbitrary code.

This affects Internet Explorer, Outlook, Outlook Express and Internet Information Server (if MDAC is used and running) and all other components relying on MDAC.

Outlook and Outlook Express users which have installed Outlook Email Security Update are not at risk.

Internet Information Servers which has been correctly configured using IIS Lockdown Tool are not at risk.

Systems running Windows XP are not at risk, as it ships with MDAC version 2.7 which isn't vulnerable.

Solution
A patch for Windows 98, Windows NT 4, Windows 2000 and Windows ME is available at:
Further details available in Customer Area

Original Advisory
http://www.microsoft.com/technet/security/bulletin/MS02-065.asp

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area