RETIRED: Microsoft Jet Database Engine MDB File Parsing Remote Code Execution Vulnerability

Bugtraq ID:	28398
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 22 2008 12:00AM
Updated:	Mar 24 2008 02:40PM
Credit:	The vendor disclosed this vulnerability.
Vulnerable:	Microsoft Word 2007 SP1 Microsoft Word 2007 0 Microsoft Word 2003 SP3 Microsoft Word 2003 SP2 + Microsoft Office 2003 SP1 + Microsoft Office 2003 SP1 + Microsoft Office 2003 0 + Microsoft Office 2003 0 Microsoft Word 2002 SP3 Microsoft Word 2000 SP3 + Microsoft Office 2000 SP3 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home SP1 - Microsoft Windows XP Home - Microsoft Windows XP Professional SP1 - Microsoft Windows XP Professional Microsoft JET 4.0 SP7 Microsoft JET 4.0 SP6 Microsoft JET 4.0 SP5 Microsoft JET 4.0 SP4 Microsoft JET 4.0 SP3 Microsoft JET 4.0 SP2 Microsoft JET 4.0 SP1 Microsoft JET 4.0 + Microsoft Access 2000 + Microsoft Access 2000 Microsoft JET 3.51 SP3 Microsoft JET 3.51 + Microsoft Excel 95 + Microsoft Excel 95 + Microsoft Excel 97 + Microsoft Excel 97 Microsoft JET 3.5 + Microsoft Access 95 + Microsoft Access 95 + Microsoft Access 97 + Microsoft Access 97 Microsoft JET 3.0 + Microsoft Access 95 + Microsoft Access 95 Microsoft JET 2.5 + Microsoft Access 2.0 SP1 + Microsoft Access 2.0 SP1 Microsoft JET 2.0 + Microsoft Access 2.0 + Microsoft Access 2.0
Not Vulnerable:

RETIRED: Microsoft Jet Database Engine MDB File Parsing Remote Code Execution Vulnerability

Microsoft Jet Database Engine is prone to a remote code-execution vulnerability.

Remote attackers can exploit this issue to execute arbitrary machine code in the context of a user running affected applications. Successful exploits will compromise the affected applications and possibly the underlying computer. Failed attacks will likely cause denial-of-service conditions.

This issue does not affect Windows Server 2003 Service Pack 2, Windows Vista, and Windows Vista Service Pack 1as they run a non-vulnerable version of the Jet Database Engine.

This issue does affect Microsoft Word 2000 Service Pack 3, Microsoft Word 2002 Service Pack 3, Microsoft Word 2003 Service Pack 2, Microsoft Word 2003 Service Pack 3, Microsoft Word 2007, and Microsoft Word 2007 Service Pack 1 on Microsoft Windows 2000, Windows XP, or Windows Server 2003 Service Pack 1.

NOTE: This issue is a duplicate of the vulnerability discussed in BID 26468 (Microsoft Jet DataBase Engine MDB File Parsing Remote Buffer Overflow Vulnerability).

RETIRED: Microsoft Jet Database Engine MDB File Parsing Remote Code Execution Vulnerability

The vendor reports that there is evidence this issue is being exploited in the wild.

RETIRED: Microsoft Jet Database Engine MDB File Parsing Remote Code Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Microsoft Jet Database Engine MDB File Parsing Remote Code Execution Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• Microsoft Security Advisory (950627) Vulnerability in Microsoft Jet Database Eng (Microsoft)
  
• Vulnerability Note VU#936529 Microsoft Jet Engine stack buffer overflow (US-CERT)