[security-alerts] FW: [SA22603] Microsoft Visual Studio WMI Object Broker ActiveX Control Code Execution

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> ----------------------------------------------------------------------
> 
> TITLE:
> Microsoft Visual Studio WMI Object Broker ActiveX Control Code
> Execution
> 
> SECUNIA ADVISORY ID:
> SA22603
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/22603/
> 
> CRITICAL:
> Extremely critical
> 
> IMPACT:
> System access
> 
> WHERE:
> From remote
> 
> SOFTWARE:
> Microsoft Visual Studio 2005
> http://secunia.com/product/6779/
> 
> DESCRIPTION:
> A vulnerability has been reported in Microsoft Visual Studio, which
> can be exploited by malicious people to compromise a user's system.
> 
> The vulnerability is caused due to an unspecified error in the WMI
> Object Broker ActiveX Control (WmiScriptUtils.dll).
> 
> Successful exploitation allows execution of arbitrary code when a
> user e.g. visits a malicious website using Internet Explorer.
> 
> The vulnerability is reported in Microsoft Visual Studio 2005.
> 
> NOTE: The vulnerability is already being actively exploited.
> 
> SOLUTION:
> Microsoft has recommended various workarounds including setting the
> kill-bit for the affected ActiveX control (see the vendor's advisory
> for details).
> 
> PROVIDED AND/OR DISCOVERED BY:
> Discovered as a 0-day.
> 
> ORIGINAL ADVISORY:
> Microsoft:
> http://www.microsoft.com/technet/security/advisory/927709.mspx
> 
> ----------------------------------------------------------------------