RETIRED: Microsoft February Advance Notification Multiple Vulnerabilities
BID:22452
Info
RETIRED: Microsoft February Advance Notification Multiple Vulnerabilities
| Bugtraq ID: | 22452 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Feb 08 2007 12:00AM |
| Updated: | Apr 19 2013 02:40AM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Professional x64 Edition Microsoft Windows XP Professional SP2 Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Media Center Edition SP2 Microsoft Windows XP Media Center Edition SP1 Microsoft Windows XP Media Center Edition Microsoft Windows XP Home SP2 Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows XP 64-bit Edition Version 2003 SP1 Microsoft Windows XP 64-bit Edition Version 2003 Microsoft Windows XP 64-bit Edition SP1 Microsoft Windows XP 64-bit Edition Microsoft Windows XP 0 Microsoft Windows Server 2003 Web Edition SP1 Beta 1 Microsoft Windows Server 2003 Web Edition SP1 Microsoft Windows Server 2003 Web Edition Microsoft Windows Server 2003 Standard x64 Edition Microsoft Windows Server 2003 Standard Edition SP1 Beta 1 Microsoft Windows Server 2003 Standard Edition SP1 Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Enterprise x64 Edition Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Beta 1 Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Microsoft Windows Server 2003 Enterprise Edition Itanium 0 Microsoft Windows Server 2003 Enterprise Edition SP1 Beta 1 Microsoft Windows Server 2003 Enterprise Edition SP1 Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Datacenter x64 Edition Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Beta 1 Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Microsoft Windows Server 2003 Datacenter Edition Itanium 0 Microsoft Windows Server 2003 Datacenter Edition SP1 Beta 1 Microsoft Windows Server 2003 Datacenter Edition SP1 Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows NT Workstation 4.0 SP6a Microsoft Windows NT Workstation 4.0 SP6 Microsoft Windows NT Workstation 4.0 SP5 Microsoft Windows NT Workstation 4.0 SP4 Microsoft Windows NT Workstation 4.0 SP3 Microsoft Windows NT Workstation 4.0 SP2 Microsoft Windows NT Workstation 4.0 SP1 Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Terminal Server 4.0 SP6a Microsoft Windows NT Terminal Server 4.0 SP6 Microsoft Windows NT Terminal Server 4.0 SP5 Microsoft Windows NT Terminal Server 4.0 SP4 Microsoft Windows NT Terminal Server 4.0 SP3 Microsoft Windows NT Terminal Server 4.0 SP2 Microsoft Windows NT Terminal Server 4.0 SP1 Microsoft Windows NT Terminal Server 4.0 Microsoft Windows NT Server 4.0 SP6a Microsoft Windows NT Server 4.0 SP6 Microsoft Windows NT Server 4.0 SP5 Microsoft Windows NT Server 4.0 SP4 Microsoft Windows NT Server 4.0 SP3 Microsoft Windows NT Server 4.0 SP2 Microsoft Windows NT Server 4.0 SP1 Microsoft Windows NT Server 4.0 Microsoft Windows NT Enterprise Server 4.0 SP6a Microsoft Windows NT Enterprise Server 4.0 SP6 Microsoft Windows NT Enterprise Server 4.0 SP5 Microsoft Windows NT Enterprise Server 4.0 SP4 Microsoft Windows NT Enterprise Server 4.0 SP3 Microsoft Windows NT Enterprise Server 4.0 SP2 Microsoft Windows NT Enterprise Server 4.0 SP1 Microsoft Windows NT Enterprise Server 4.0 Microsoft Windows ME Microsoft Windows Live OneCare 0 Microsoft Windows Defender 0 Microsoft Windows 98SE Microsoft Windows 98 Microsoft Windows 95 Microsoft Windows 2000 Server SP4 Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Professional SP3 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server SP4 Microsoft Windows 2000 Datacenter Server SP3 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP4 Microsoft Windows 2000 Advanced Server SP3 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server Microsoft Visual Studio 2005 Team Edition 0 Microsoft Visual Studio 2005 Microsoft Visual Studio .NET Trial Edition 0 Microsoft Visual Studio .NET Professional Edition Microsoft Visual Studio .NET Enterprise Developer Edition Microsoft Visual Studio .NET Enterprise Architect Edition Microsoft Visual Studio .NET Academic Edition 0 Microsoft Visual Studio .NET 2003 Enterprise Architect Microsoft Visual Studio .NET 2003 Microsoft Visual Studio .NET 2002 Microsoft Visual Studio 6.0 SP5 Microsoft Visual Studio 6.0 SP4 Microsoft Visual Studio 6.0 SP3 Microsoft Visual Studio 6.0 SP2 Microsoft Visual Studio 6.0 SP1 Microsoft Visual Studio 6.0 Microsoft Step-By-Step Interactive 0 Microsoft Office XP SP3 Microsoft Office XP SP2 Microsoft Office XP SP1 Microsoft Office XP Microsoft Office X for Mac 0 Microsoft Office v. X Microsoft Office 98 For Mac Microsoft Office 97 Microsoft Office 2004 for Mac 0 Microsoft Office 2003 SP3 Microsoft Office 2003 SP2 Microsoft Office 2003 SP1 Microsoft Office 2003 0 Microsoft Office 2002 0 Microsoft Office 2001 For Macintosh SR1 Microsoft Office 2001 For Macintosh Microsoft Office 2001 for Mac Microsoft Office 2000 SP3 Microsoft Office 2000 SP1 Microsoft Office 2000 Microsoft Internet Explorer for Unix SP2 Microsoft ForeFront 0 Microsoft Data Access Components (MDAC) 0 Microsoft Antigen 0 |
| Not Vulnerable: | |
Discussion
RETIRED: Microsoft February Advance Notification Multiple Vulnerabilities
Microsoft has released advance notification that the vendor will be releasing 12 security bulletins on February 13, 2007. The highest severity rating for these issues is 'Critical'.
Further details about these issues are not currently available. Individual BIDs will be created for each issue; this record will be removed when the security bulletins are released.
These vulnerabilities have been assigned to the following BIDs:
22484 Microsoft Step-by-Step Interactive Training Buffer Overflow Vulnerability
22481 Microsoft Windows Shell Hardware Detection Service Privilege Escalation Vulnerability
22499 Microsoft Windows Image Acquisition Service Privilege Escalation Vulnerability
22478 Microsoft HTML Help ActiveX Control Remote Code Execution Vulnerability
20704 Microsoft Internet Explorer ADODB.Connection Execute Memory Corruption Vulnerability
22479 Microsoft Antivirus Engine Integer Overflow Vulnerability
22483 Microsoft Windows OLE Dialog Remote Code Execution Vulnerability
22476 Microsoft MFC Embedded OLE Object Remote Code Execution Vulnerability
21876 Microsoft Office And Microsoft Windows RichEdit Component Remote Code Execution Vulnerability
21451 Microsoft Word Malformed String Arbitrary Remote Code Execution Vulnerability
21518 Microsoft Word Malformed Data Structures Code Execution Vulnerability
21589 Microsoft Word Code Execution Vulnerability
22477 Microsoft Word Macro Permissions Bypass Arbitrary Code Execution Vulnerability
22482 Microsoft Word Malformed Drawing Object Arbitrary Code Execution Vulnerability
22225 Microsoft Word 2000 Malformed Function Code Execution Vulnerability
20325 Microsoft PowerPoint Record Improper Memory Access Remote Code Execution Vulnerability
22383 Microsoft Office Malformed String Remote Code Execution Vulnerability
22486 Microsoft Internet Explorer IMJPCKSI COM Object Instantiation Memory Corruption Vulnerability
22504 Microsoft Internet Explorer COM Object Instantiation Variant Memory Corruption Vulnerability
Microsoft has released advance notification that the vendor will be releasing 12 security bulletins on February 13, 2007. The highest severity rating for these issues is 'Critical'.
Further details about these issues are not currently available. Individual BIDs will be created for each issue; this record will be removed when the security bulletins are released.
These vulnerabilities have been assigned to the following BIDs:
22484 Microsoft Step-by-Step Interactive Training Buffer Overflow Vulnerability
22481 Microsoft Windows Shell Hardware Detection Service Privilege Escalation Vulnerability
22499 Microsoft Windows Image Acquisition Service Privilege Escalation Vulnerability
22478 Microsoft HTML Help ActiveX Control Remote Code Execution Vulnerability
20704 Microsoft Internet Explorer ADODB.Connection Execute Memory Corruption Vulnerability
22479 Microsoft Antivirus Engine Integer Overflow Vulnerability
22483 Microsoft Windows OLE Dialog Remote Code Execution Vulnerability
22476 Microsoft MFC Embedded OLE Object Remote Code Execution Vulnerability
21876 Microsoft Office And Microsoft Windows RichEdit Component Remote Code Execution Vulnerability
21451 Microsoft Word Malformed String Arbitrary Remote Code Execution Vulnerability
21518 Microsoft Word Malformed Data Structures Code Execution Vulnerability
21589 Microsoft Word Code Execution Vulnerability
22477 Microsoft Word Macro Permissions Bypass Arbitrary Code Execution Vulnerability
22482 Microsoft Word Malformed Drawing Object Arbitrary Code Execution Vulnerability
22225 Microsoft Word 2000 Malformed Function Code Execution Vulnerability
20325 Microsoft PowerPoint Record Improper Memory Access Remote Code Execution Vulnerability
22383 Microsoft Office Malformed String Remote Code Execution Vulnerability
22486 Microsoft Internet Explorer IMJPCKSI COM Object Instantiation Memory Corruption Vulnerability
22504 Microsoft Internet Explorer COM Object Instantiation Variant Memory Corruption Vulnerability
Exploit / POC
RETIRED: Microsoft February Advance Notification Multiple Vulnerabilities
Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
RETIRED: Microsoft February Advance Notification Multiple Vulnerabilities
Solution:
Microsoft plans to release fixes to address these issues on February 13, 2007.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Microsoft plans to release fixes to address these issues on February 13, 2007.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
RETIRED: Microsoft February Advance Notification Multiple Vulnerabilities
References:
References: