Microsoft Windows OLE Automation code execution
| ms-ole-automation-code-execution (28659) |  High Risk |
Description:
The Microsoft Windows Object linking and embedding (OLE) Automation protocol could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption vulnerability that could occur when processing a specially-crafted memory request. A remote attacker could exploit this vulnerability to execute arbitrary code and gain complete control of an affected system, if the attacker could persuade the victim to visit a malicious Web page or view a malicious email message.
Platforms Affected:
- Microsoft, Office 2004
- Microsoft, Visual Basic 6.0 SP6
- Microsoft, Windows 2000 SP4
- Microsoft, Windows 2003 Server SP1
- Microsoft, Windows 2003 Server x64
- Microsoft, Windows 2003 Server SP1 Itanium
- Microsoft, Windows 2003 Server SP2 x64
- Microsoft, Windows 2003 Server SP2 Itanium
- Microsoft, Windows 2003 Server SP2
- Microsoft, Windows XP SP2 Professional x64
- Microsoft, Windows XP SP2
- Microsoft, Windows XP Professional x64
Remedy:
Apply the appropriate patch for your system, as listed in the latest Microsoft Security Bulletin. See References.
— OR —
Use Microsoft Automatic Update if it is supported by your operating system. The original bulletin issued by Microsoft has been superseded.
Consequences:
Gain Access
References:
- HPSBST02255 SSRT071456 rev.1, Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-042 to MS07-050 at http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01143196&jumpid=reg_R1002_USEN.
- Microsoft Security Bulletin MS07-043, Vulnerability in OLE Automation Could Allow Remote Code Execution (921503) at http://www.microsoft.com/technet/security/Bulletin/MS07-043.mspx.
- Microsoft Security Bulletin MS08-008, Vulnerability in OLE Automation Could Allow Remote Code Execution (947890) at http://www.microsoft.com/technet/security/bulletin/ms08-008.mspx.
- ZDI-07-048, Microsoft Internet Explorer substringData() Heap Overflow Vulnerability at http://www.zerodayinitiative.com/advisories/ZDI-07-048.html.
- ASA-2007-367: MS07-043 Vulnerability in OLE Automation Could Allow Remote Code Execution (921503)
- BID-25282: Microsoft OLE Automation SubstringData Function Integer Overflow Vulnerability
- CVE-2007-2224: Object linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Office 2004 for Mac, and Visual Basic 6.0 allows remote attackers to execute arbitrary code via the substringData method on a TextNode object, which causes an integer overflow that leads to a buffer overflow.
- FrSIRT/ADV-2007-2867: Microsoft OLE Automation Remote Command Execution Vulnerability (MS07-043)
- SA26449: Microsoft Windows OLE Automation "substringData()" Integer Overflow
- SECTRACK ID: 1018560: Microsoft OLE Automation Memory Corruption Bug Lets Remote Users Execute Arbitrary Code
Reported:
Aug 14, 2007
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net