Microsoft Jet Database Engine MDB File Parsing Unspecified Remote Vulnerability

Bugtraq ID:	28087
Class:	Unknown
CVE:	CVE-2008-1200
Remote:	Yes
Local:	No
Published:	Mar 03 2008 12:00AM
Updated:	May 07 2015 05:32PM
Credit:	Panda Security discovered this issue as a zero-day exploit.
Vulnerable:	Microsoft JET 4.0 + Microsoft Access 2000 + Microsoft Access 2000
Not Vulnerable:

Microsoft Jet Database Engine MDB File Parsing Unspecified Remote Vulnerability

Microsoft Jet Database Engine is prone to an unspecifed security vulnerability.

Remote attackers can exploit this issue to execute arbitrary machine code in the context of a user running the application. Successful exploits will compromise the affected application and possibly the underlying computer. Failed attacks will likely cause denial-of-service conditions.

Microsoft Jet Database Engine MDB File Parsing Unspecified Remote Vulnerability

Reports indicate that this issue is being exploited in the wild.

Microsoft Jet Database Engine MDB File Parsing Unspecified Remote Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Jet Database Engine MDB File Parsing Unspecified Remote Vulnerability

References:

• KB925330 - An overview of unsafe file types in Microsoft products (Microsoft)
  
• Microsoft Homepage (Microsoft)
  
• New MS Access exploit (PandaLabs)