Multiple Microsoft Products for MacOS File URL Buffer Overflow Vulnerability
BID:4517
Info
Multiple Microsoft Products for MacOS File URL Buffer Overflow Vulnerability
| Bugtraq ID: | 4517 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 16 2002 12:00AM |
| Updated: | Apr 16 2002 12:00AM |
| Credit: | Published in Microsoft Security Bulletin MS02-019 and credited to Josha Bronson of AngryPacket Security and w00w00. |
| Vulnerable: |
Microsoft PowerPoint 98 for Mac Microsoft Outlook Express for MacOS 5.0.3 Microsoft Outlook Express for MacOS 5.0.2 Microsoft Outlook Express for MacOS 5.0.1 Microsoft Outlook Express for MacOS 5.0 Microsoft Office v. X Microsoft Office 2001 For Macintosh SR1 Microsoft Office 2001 For Macintosh Microsoft Internet Explorer Macintosh Edition 5.1 |
| Not Vulnerable: | |
Discussion
Multiple Microsoft Products for MacOS File URL Buffer Overflow Vulnerability
An issue has been reported in various Microsoft products for MacOS, including Internet Explorer, Outlook Express, Entourage, PowerPoint, Excel and Word.
Reportedly, a common component of all of the listed products contain a buffer overflow condition. The problem exists in the handling of file:/// URLs.
If a user is enticed to access a file:/// URL composed of arbitrary data, a buffer overflow could occur.
An issue has been reported in various Microsoft products for MacOS, including Internet Explorer, Outlook Express, Entourage, PowerPoint, Excel and Word.
Reportedly, a common component of all of the listed products contain a buffer overflow condition. The problem exists in the handling of file:/// URLs.
If a user is enticed to access a file:/// URL composed of arbitrary data, a buffer overflow could occur.
Exploit / POC
Multiple Microsoft Products for MacOS File URL Buffer Overflow Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Multiple Microsoft Products for MacOS File URL Buffer Overflow Vulnerability
Solution:
The following patches have been released. Please note that the patches for Microsoft PowerPoint 98 for Macintosh have not yet been released:
Microsoft Office v. X
Microsoft Office 2001 For Macintosh SR1
Microsoft Outlook Express for MacOS 5.0
Microsoft Outlook Express for MacOS 5.0.1
Microsoft Outlook Express for MacOS 5.0.2
Microsoft Outlook Express for MacOS 5.0.3
Microsoft Internet Explorer Macintosh Edition 5.1
Solution:
The following patches have been released. Please note that the patches for Microsoft PowerPoint 98 for Macintosh have not yet been released:
Microsoft Office v. X
-
Microsoft CombinedUpdater1003EN
http://download.microsoft.com/download/OfficeX/Update/10.0.3/MacOS/EN- US/CombinedUpdater1003EN.hqx
Microsoft Office 2001 For Macintosh SR1
-
Microsoft Office2001URLEN
http://download.microsoft.com/download/Office9Mac/Update/1.00/MacOS/EN -US/Office2001URLEN.hqx
Microsoft Outlook Express for MacOS 5.0
-
Microsoft oe504install_en
http://download.microsoft.com/download/outlookexp5mac/Install/5.0.4/Ma cOS/EN-US/oe504install_en.hqx
Microsoft Outlook Express for MacOS 5.0.1
-
Microsoft oe504install_en
http://download.microsoft.com/download/outlookexp5mac/Install/5.0.4/Ma cOS/EN-US/oe504install_en.hqx
Microsoft Outlook Express for MacOS 5.0.2
-
Microsoft oe504install_en
http://download.microsoft.com/download/outlookexp5mac/Install/5.0.4/Ma cOS/EN-US/oe504install_en.hqx
Microsoft Outlook Express for MacOS 5.0.3
-
Microsoft oe504install_en
http://download.microsoft.com/download/outlookexp5mac/Install/5.0.4/Ma cOS/EN-US/oe504install_en.hqx
Microsoft Internet Explorer Macintosh Edition 5.1
References
Multiple Microsoft Products for MacOS File URL Buffer Overflow Vulnerability
References:
References:
- Mactopia downloads (Microsoft)
- Mactopia Homepage (Microsoft)
- Microsoft Security Bulletin MS02-019 (Microsoft)
- Security Updates (Apple)