PT-2008-1402 · Microsoft · Windows 2000+6

Published 2008-02-12 · Updated 2018-10-12 · CVE-2007-0065

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2000 SP4 through XP SP2 Microsoft Windows Server 2003 versions SP1 through SP2 Microsoft Windows Vista Microsoft Office 2004 for Mac Microsoft Visual Basic 6.0 version SP6

Description A heap-based buffer overflow in Object Linking and Embedding (OLE) Automation allows remote attackers to execute arbitrary code via a crafted script request. This issue could enable an attacker to make changes to the system with the permissions of the logged-on user. If the user has administrative rights, the attacker could take complete control of the system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights may be less impacted.

Recommendations For Microsoft Windows 2000 SP4, update to a version that includes the fix for this issue. For Microsoft Windows XP SP2, apply the necessary patch to resolve the issue. For Microsoft Windows Server 2003 SP1 and SP2, install the update that addresses this vulnerability. For Microsoft Windows Vista, apply the relevant security update. For Microsoft Office 2004 for Mac, install the available patch. For Microsoft Visual Basic 6.0 SP6, consider disabling the OLE Automation feature until a patch is available.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2007-0065

Affected Products

Office 2004 For Mac

Visual Basic 6.0

Windows

Windows 2000

Windows Server 2003

Windows Vista

Windows Xp

References · 11

• http://marc.info/?l=bugtraq&m=120361015026386&w=2 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-008 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0065 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0065 · Security Note
• http://vupen.com/english/advisories/2008/0510/references · Note
• http://securityfocus.com/bid/27661 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-008 · Note
• http://secunia.com/advisories/28902 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5388 · Note
• http://us-cert.gov/cas/techalerts/TA08-043C.html · Note
• http://securitytracker.com/id?1019373 · Note