funsec mailing list archives

Redmond issued a warning about targeted attacks using MS Jet vulnerability


From: Juha-Matti Laurio <juha-matti.laurio () netti fi>
Date: Sat, 22 Mar 2008 23:56:39 +0200 (EET)

Microsoft Security Advisory (950627)
Vulnerability in Microsoft Jet Database Engine (Jet) Could Allow Remote Code Execution
Published: March 21, 2008

"Microsoft is investigating new public reports of very limited, targeted attacks using a vulnerability in the Microsoft 
Jet Database Engine that can be exploited through Microsoft Word.

Customers using Microsoft Word 2000 Service Pack 3, Microsoft Word 2002 Service Pack 3, Microsoft Word 2003 Service 
Pack 2, Microsoft Word 2003 Service Pack 3, Microsoft Word 2007, and Microsoft Word 2007 Service Pack 1 on Microsoft 
Windows 2000, Windows XP, or Windows Server 2003 Service Pack 1 are vulnerable to these attacks."

The advisory is located at
http://www.microsoft.com/technet/security/advisory/950627.mspx

BID28398:
http://www.securityfocus.com/bid/28398

Juha-Matti
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: