Description: A vulnerability has been identified in Microsoft Visual Basic for Applications (VBA) allowing malicious Office or HTML documents to cause a buffer overflow.
The problem is that VBA (VBE.DLL and VBE6.DLL) doesn't check the "ID" parameter properly before processing the document. This allows malicious people to create a document, which could cause a buffer overflow and execute arbitrary code.
This affects all programs, which use VBA to process documents. This includes Internet Explorer if Microsoft Office programs are installed because Office documents are automatically opened with a helper application.
Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, scan using the Network Software Inspector.
The Microsoft VBA patch can be installed on systems running the following applications:
Microsoft VBA 5.0
Microsoft VBA 6.0
Microsoft VBA 6.2
Microsoft VBA 6.3.
Microsoft Access 97
Microsoft Excel 97
Microsoft PowerPoint 97
Microsoft Word 97
Microsoft Word 98(J)
Microsoft Visio 2000
Microsoft Works Suite 2001
Microsoft Business Solutions Great Plains 7.5
Microsoft Business Solutions Dynamics 6.0
Microsoft Business Solutions Dynamics 7.0
Microsoft Business Solutions eEnterprise 6.0
Microsoft Business Solutions eEnterprise 7.0
Microsoft Business Solutions Solomon 4.5
Microsoft Business Solutions Solomon 5.0
Microsoft Business Solutions Solomon 5.5
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
