A vulnerability has been identified in Microsoft Access Snapshot Viewer ActiveX control potentially allowing malicious HTML documents and Microsoft Access Snapshot files to cause a buffer overflow.

The problem is that Microsoft Access Snapshot Viewer doesn't verify certain parameters properly. This allows malicous people to create snapshot files, which may cause a buffer overflow and execute arbitrary code.

Since the vulnerability exists in a digitally signed ActiveX control this also affects any Internet Explorer, which allows execution of ActiveX. Any site or person may re-introduce this vulnerability until the next update for Internet Explorer, which will set the kill-bit on the vulnerable ActiveX component.

Solution
Secunia recommends that you disallow ActiveX for all sites and then only allow ActiveX on a "per site" basis.
Further details available to Secunia VIM customers

Provided and/or discovered by
Oliver Lavery

Original Advisory
http://www.microsoft.com/technet/security/bulletin/MS03-038.asp

Deep Links
Links available to Secunia VIM customers