[security-alerts] FW: [SA28902] Microsoft Windows OLE Automation Memory Corruption

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

>
> TITLE:
> Microsoft Windows OLE Automation Memory Corruption
>
> SECUNIA ADVISORY ID:
> SA28902
>
> VERIFY ADVISORY:
> http://secunia.com/advisories/28902/
>
> CRITICAL:
> Highly critical
>
> IMPACT:
> System access
>
> WHERE:
> From remote
>
> OPERATING SYSTEM:
> Microsoft Windows XP Professional
> http://secunia.com/product/22/
> Microsoft Windows XP Home Edition
> http://secunia.com/product/16/
> Microsoft Windows Vista
> http://secunia.com/product/13223/
> Microsoft Windows Storage Server 2003
> http://secunia.com/product/12399/
> Microsoft Windows Server 2003 Web Edition
> http://secunia.com/product/1176/
> Microsoft Windows Server 2003 Standard Edition
> http://secunia.com/product/1173/
> Microsoft Windows Server 2003 Enterprise Edition
> http://secunia.com/product/1174/
> Microsoft Windows Server 2003 Datacenter Edition
> http://secunia.com/product/1175/
> Microsoft Windows 2000 Server
> http://secunia.com/product/20/
> Microsoft Windows 2000 Professional
> http://secunia.com/product/1/
> Microsoft Windows 2000 Datacenter Server
> http://secunia.com/product/1177/
> Microsoft Windows 2000 Advanced Server
> http://secunia.com/product/21/
>
> SOFTWARE:
> Microsoft Visual Basic 6.x
> http://secunia.com/product/410/
> Microsoft Office 2004 for Mac
> http://secunia.com/product/8713/
>
> DESCRIPTION:
> A vulnerability has been reported in Microsoft Windows, which can be
> exploited by malicious people to compromise a user's system.
>
> The vulnerability is caused due to an error in the VBScript and
> JScript scripting engines during handling of certain script requests
> when using OLE (Object Linking and Embedding) Automation. This can be
> exploited to corrupt heap memory via specially crafted script
> requests.
>
> Successful exploitation allows execution of arbitrary code when a
> user e.g. visits a malicious website.
>
> SOLUTION:
> Apply patches.
>
> Windows 2000 SP4:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=93b3d
> 0a3-2091-405e-8dd4-10f20dc2be7f
>
> Windows XP SP2:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=5c331
> a3a-93e0-42e4-9cd1-4e32ebdda38d
>
> Windows XP Professional x64 Edition (optionally with SP2):
> http://www.microsoft.com/downloads/details.aspx?FamilyId=e0a15
> 967-7184-4194-8edb-81760e440604
>
> Windows Server 2003 SP1/SP2:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=cfa0d
> 5c6-a9b0-4c5c-a651-898e9f900799
>
> Windows Server 2003 x64 Edition (optionally with SP2):
> http://www.microsoft.com/downloads/details.aspx?FamilyId=a08e8
> 7dc-993b-493b-8af3-be6e98643aeb
>
> Windows Server 2003 with SP1/SP2 for Itanium-based systems:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=5a885
> 22b-ee30-4deb-878b-598e852fd60e
>
> Windows Vista:
> http://www.microsoft.com/downloads/details.aspx?FamilyID=c67ec
> 357-0f86-4f7d-9af0-d63d8b765f44
>
> Windows Vista x64 Edition:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=91371
> 08f-e80b-46f1-b547-82da8fb058bf
>
> Microsoft Office 2004 for Mac:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=36B00
> C58-192D-488C-A069-730C69F0B6B0
>
> Microsoft Visual Basic 6.0 SP6:
> http://www.microsoft.com/downloads/details.aspx?FamilyID=C9642
> 0A9-7436-4625-9649-75F1514B0FE3
>
> PROVIDED AND/OR DISCOVERED BY:
> The vendor credits Ryan Smith and Alex Wheeler, IBM ISS X-Force.
>
> ORIGINAL ADVISORY:
> MS08-008 (KB947890):
> http://www.microsoft.com/technet/security/Bulletin/MS08-008.mspx
>