PT-2009-3700 · Microsoft · Internet Security/Acceleration (Isa) Server+5

Haifei Li + 1 · Published 2009-07-15 · Updated 2018-10-12 · CVE-2009-1136

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office Web Components versions in Office XP SP3 and Office 2003 SP3 Microsoft Office Web Components versions in Office XP Web Components SP3 and Office 2003 Web Components SP3 Microsoft Office Web Components versions in Office 2003 Web Components SP1 for the 2007 Microsoft Office System Microsoft Office Web Components versions in Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 Gold and SP1 Microsoft Office Web Components versions in Office Small Business Accounting 2006

Description The issue allows remote attackers to execute arbitrary code via a crafted call to the msDataSourceObject method. This has been exploited in the wild in July and August 2009.

Recommendations For Microsoft Office Web Components versions in Office XP SP3 and Office 2003 SP3, update to a version that includes the fix for this issue. For Microsoft Office Web Components versions in Office XP Web Components SP3 and Office 2003 Web Components SP3, update to a version that includes the fix for this issue. For Microsoft Office Web Components versions in Office 2003 Web Components SP1 for the 2007 Microsoft Office System, update to a version that includes the fix for this issue. For Microsoft Office Web Components versions in Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 Gold and SP1, update to a version that includes the fix for this issue. For Microsoft Office Web Components versions in Office Small Business Accounting 2006, update to a version that includes the fix for this issue.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2009-1136

Affected Products

2007 Microsoft Office System

Internet Security/Acceleration (Isa) Server

Office Web Components

Office 2003

Office Small Business Accounting 2006

Office Xp

References · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms09_043_owc_msdso.rb · Exploit
• 🔥 https://exploit-db.com/exploits/9163 · Exploit
• 🔥 http://trac.metasploit.com/browser/framework3/trunk/modules/exploits/windows/browser/owc_spreadsheet_msdso.rb · Exploit
• 🔥 http://xeye.us/blog/2009/07/one-0day · Exploit
• 🔥 https://exploit-db.com/exploits/16537 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-1136 · Security Note
• http://microsoft.com/technet/security/advisory/973472.mspx · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043 · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA09-223A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5809 · Note
• http://blogs.technet.com/msrc/archive/2009/07/13/microsoft-security-advisory-973472-released.aspx · Note
• http://isc.sans.org/diary.html?storyid=6778 · Note
• http://blogs.technet.com/srd/archive/2009/07/13/more-information-about-the-office-web-components-activex-vulnerability.aspx · Note