Microsoft Visual Basic For Applications Document Handling Buffer Overrun Vulnerability
BID:8534
Info
Microsoft Visual Basic For Applications Document Handling Buffer Overrun Vulnerability
| Bugtraq ID: | 8534 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2003-0347 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 03 2003 12:00AM |
| Updated: | Nov 01 2007 08:16PM |
| Credit: | Discovery is credited to eEye Digital Security. |
| Vulnerable: |
Microsoft Business Solutions Solomon 5.5 Microsoft Business Solutions Solomon 5.0 Microsoft Business Solutions Solomon 4.5 Microsoft Business Solutions eEnterprise 7.0 Microsoft Business Solutions eEnterprise 6.0 Microsoft Business Solutions Dynamics 7.0 Microsoft Business Solutions Dynamics 6.0 Microsoft Works Suite 2004 Microsoft Works Suite 2003 Microsoft Works Suite 2002 Microsoft Works Suite 2001 Microsoft Word 98(J) SR2 Microsoft Word 98(J) SR1 Microsoft Word 98(J) Microsoft Word 97 SR2 Microsoft Word 97 SR1 Microsoft Word 97 Microsoft Word 2002 SP2 Microsoft Word 2002 SP1 Microsoft Word 2002 Microsoft Word 2000 SR1a Microsoft Word 2000 SR1 Microsoft Word 2000 SP3 Microsoft Word 2000 SP2 Microsoft Word 2000 Microsoft Visual Basic for Applications SDK 6.3 Microsoft Visual Basic for Applications SDK 6.2 Microsoft Visual Basic for Applications SDK 6.0 Microsoft Visual Basic for Applications SDK 5.0 Microsoft Visio Professional 2002 Microsoft Visio 2000 Enterprise Edition SR1 Microsoft Visio 2000 Enterprise Edition Microsoft Publisher 2002 Microsoft Project 2002 Microsoft Project 2000 Microsoft PowerPoint 97 Microsoft PowerPoint 2002 SP2 Microsoft PowerPoint 2002 SP1 Microsoft PowerPoint 2002 Microsoft PowerPoint 2000 SP3 Microsoft PowerPoint 2000 SR1 Microsoft PowerPoint 2000 SP2 Microsoft PowerPoint 2000 Microsoft Office XP SP2 Microsoft Office XP SP1 Microsoft Office XP Microsoft Office 2000 SP3 Microsoft Office 2000 SP2 Microsoft Office 2000 Microsoft Internet Explorer for Unix SP2 Microsoft Great Plains 7.5 Microsoft Excel 97 SR2 Microsoft Excel 97 SR1 Microsoft Excel 97 Microsoft Excel 2002 SP2 Microsoft Excel 2002 SP1 Microsoft Excel 2002 Microsoft Excel 2000 SR1 Microsoft Excel 2000 SP3 Microsoft Excel 2000 SP2 Microsoft Excel 2000 Microsoft Access 97 Microsoft Access 2002 SP2 Microsoft Access 2002 SP1 Microsoft Access 2002 Microsoft Access 2000 SR1 Microsoft Access 2000 SP3 Microsoft Access 2000 SP2 Microsoft Access 2000 |
| Not Vulnerable: | |
Solution / Fix
Microsoft Visual Basic For Applications Document Handling Buffer Overrun Vulnerability
Solution:
Microsoft has released patches.
The VBA patch can be applied to the following products (which include vulnerable versions of Microsoft VBA):
Microsoft VBA 5.0
Microsoft VBA 6.0
Microsoft VBA 6.2
Microsoft VBA 6.3
Microsoft Access 97
Microsoft Excel 97
Microsoft PowerPoint 97
Microsoft Word 97
Microsoft Word 98(J)
Microsoft Works 2001
Microsoft Works 2002
Microsoft Works Suite 2003
Microsoft Business Solutions Great Plains 7.5
Microsoft Business Solutions Dynamics 6.0
Microsoft Business Solutions Dynamics 7.0
Microsoft Business Solutions eEnterprise 6.0
Microsoft Business Solutions eEnterprise 7.0
Microsoft Business Solutions Solomon 4.5
Microsoft Business Solutions Solomon 5.0
Microsoft Business Solutions Solomon 5.5
Patches have also been included for Office and other affected products.
Microsoft PowerPoint 2000 SP3
Microsoft Works Suite 2002
Microsoft Word 2002 SP2
Microsoft Word 2000 SP3
Microsoft PowerPoint 97
Microsoft Visual Basic for Applications SDK 6.2
Microsoft Works Suite 2003
Microsoft Visual Basic for Applications SDK 5.0
Microsoft Excel 2002 SP2
Microsoft PowerPoint 2002 SP2
Microsoft Access 2000 SP3
Microsoft Project 2000
Microsoft Access 97
Microsoft Visio 2000 Enterprise Edition
Microsoft Office 2000 SP3
Microsoft Visual Basic for Applications SDK 6.0
Microsoft Project 2002
Microsoft Visual Basic for Applications SDK 6.3
Microsoft Office XP SP2
Microsoft Works Suite 2001
Microsoft Visio Professional 2002
Microsoft Excel 97
Microsoft Excel 2000 SP3
Microsoft Access 2002 SP2
Solution:
Microsoft has released patches.
The VBA patch can be applied to the following products (which include vulnerable versions of Microsoft VBA):
Microsoft VBA 5.0
Microsoft VBA 6.0
Microsoft VBA 6.2
Microsoft VBA 6.3
Microsoft Access 97
Microsoft Excel 97
Microsoft PowerPoint 97
Microsoft Word 97
Microsoft Word 98(J)
Microsoft Works 2001
Microsoft Works 2002
Microsoft Works Suite 2003
Microsoft Business Solutions Great Plains 7.5
Microsoft Business Solutions Dynamics 6.0
Microsoft Business Solutions Dynamics 7.0
Microsoft Business Solutions eEnterprise 6.0
Microsoft Business Solutions eEnterprise 7.0
Microsoft Business Solutions Solomon 4.5
Microsoft Business Solutions Solomon 5.0
Microsoft Business Solutions Solomon 5.5
Patches have also been included for Office and other affected products.
Microsoft PowerPoint 2000 SP3
-
Microsoft office2000-kb822035-client-enu.exe
Office 2000 Security Patch: KB822035.
http://microsoft.com/downloads/details.aspx?FamilyId=E2CCE199-9C4A-4EE C-A3EC-9F738017F275&displaylang=en
Microsoft Works Suite 2002
-
Microsoft officexp-kb822036-client-enu.exe
Office XP Security Patch: KB822036.
http://microsoft.com/downloads/details.aspx?FamilyId=6F1FC4B0-29E9-44E 0-A33D-AD6B4B6A8FF4&displaylang=en
Microsoft Word 2002 SP2
-
Microsoft officexp-kb822036-client-enu.exe
Office XP Security Patch: KB822036.
http://microsoft.com/downloads/details.aspx?FamilyId=6F1FC4B0-29E9-44E 0-A33D-AD6B4B6A8FF4&displaylang=en
Microsoft Word 2000 SP3
-
Microsoft office2000-kb822035-client-enu.exe
Office 2000 Security Patch: KB822035.
http://microsoft.com/downloads/details.aspx?FamilyId=E2CCE199-9C4A-4EE C-A3EC-9F738017F275&displaylang=en
Microsoft PowerPoint 97
-
Microsoft VBA64-KB822150-X86-ENU.exe
Microsoft® Visual Basic® for Applications Update - Q822150.
http://microsoft.com/downloads/details.aspx?FamilyId=DA1A7ABA-CD3D-458 B-9729-AB9094C9BD3F&displaylang=en
Microsoft Visual Basic for Applications SDK 6.2
-
Microsoft VBA64-KB822150-X86-ENU.exe
Microsoft® Visual Basic® for Applications Update - Q822150.
http://microsoft.com/downloads/details.aspx?FamilyId=DA1A7ABA-CD3D-458 B-9729-AB9094C9BD3F&displaylang=en
Microsoft Works Suite 2003
-
Microsoft officexp-kb822036-client-enu.exe
Office XP Security Patch: KB822036.
http://microsoft.com/downloads/details.aspx?FamilyId=6F1FC4B0-29E9-44E 0-A33D-AD6B4B6A8FF4&displaylang=en
Microsoft Visual Basic for Applications SDK 5.0
-
Microsoft VBA64-KB822150-X86-ENU.exe
Microsoft® Visual Basic® for Applications Update - Q822150.
http://microsoft.com/downloads/details.aspx?FamilyId=DA1A7ABA-CD3D-458 B-9729-AB9094C9BD3F&displaylang=en
Microsoft Excel 2002 SP2
-
Microsoft officexp-kb822036-client-enu.exe
Office XP Security Patch: KB822036.
http://microsoft.com/downloads/details.aspx?FamilyId=6F1FC4B0-29E9-44E 0-A33D-AD6B4B6A8FF4&displaylang=en
Microsoft PowerPoint 2002 SP2
-
Microsoft officexp-kb822036-client-enu.exe
Office XP Security Patch: KB822036.
http://microsoft.com/downloads/details.aspx?FamilyId=6F1FC4B0-29E9-44E 0-A33D-AD6B4B6A8FF4&displaylang=en
Microsoft Access 2000 SP3
-
Microsoft office2000-kb822035-client-enu.exe
Office 2000 Security Patch: KB822035.
http://microsoft.com/downloads/details.aspx?FamilyId=E2CCE199-9C4A-4EE C-A3EC-9F738017F275&displaylang=en
Microsoft Project 2000
-
Microsoft project2000-kb822478-fullfile-enu.exe
Microsoft Project 2000 Security Patch: KB822478.
http://microsoft.com/downloads/details.aspx?FamilyId=E53A52E7-431D-458 0-9733-B92A2B7BFD0D&displaylang=en
Microsoft Access 97
-
Microsoft VBA64-KB822150-X86-ENU.exe
Microsoft® Visual Basic® for Applications Update - Q822150.
http://microsoft.com/downloads/details.aspx?FamilyId=DA1A7ABA-CD3D-458 B-9729-AB9094C9BD3F&displaylang=en
Microsoft Visio 2000 Enterprise Edition
-
Microsoft VBA64-KB822150-X86-ENU.exe
Microsoft® Visual Basic® for Applications Update - Q822150.
http://microsoft.com/downloads/details.aspx?FamilyId=DA1A7ABA-CD3D-458 B-9729-AB9094C9BD3F&displaylang=en
Microsoft Office 2000 SP3
-
Microsoft office2000-kb822035-client-enu.exe
Office 2000 Security Patch: KB822035.
http://microsoft.com/downloads/details.aspx?FamilyId=E2CCE199-9C4A-4EE C-A3EC-9F738017F275&displaylang=en
Microsoft Visual Basic for Applications SDK 6.0
-
Microsoft VBA64-KB822150-X86-ENU.exe
Microsoft® Visual Basic® for Applications Update - Q822150.
http://microsoft.com/downloads/details.aspx?FamilyId=DA1A7ABA-CD3D-458 B-9729-AB9094C9BD3F&displaylang=en
Microsoft Project 2002
-
Microsoft project2002-kb822211-fullfile-enu.exe
Microsoft Project 2002 Security Patch: KB822211.
http://microsoft.com/downloads/details.aspx?FamilyId=525BDE0A-0028-488 A-8209-6E07D4603CCB&displaylang=en
Microsoft Visual Basic for Applications SDK 6.3
-
Microsoft VBA64-KB822150-X86-ENU.exe
Microsoft® Visual Basic® for Applications Update - Q822150.
http://microsoft.com/downloads/details.aspx?FamilyId=DA1A7ABA-CD3D-458 B-9729-AB9094C9BD3F&displaylang=en
Microsoft Office XP SP2
-
Microsoft officexp-kb822036-client-enu.exe
Office XP Security Patch: KB822036.
http://microsoft.com/downloads/details.aspx?FamilyId=6F1FC4B0-29E9-44E 0-A33D-AD6B4B6A8FF4&displaylang=en
Microsoft Works Suite 2001
-
Microsoft VBA64-KB822150-X86-ENU.exe
Microsoft® Visual Basic® for Applications Update - Q822150.
http://microsoft.com/downloads/details.aspx?FamilyId=DA1A7ABA-CD3D-458 B-9729-AB9094C9BD3F&displaylang=en
Microsoft Visio Professional 2002
-
Microsoft visio2002-kb822212-fullfile-enu.exe
Visio 2002 Security Patch: KB822212.
http://microsoft.com/downloads/details.aspx?FamilyId=55944490-13C2-404 3-BA2A-17AF02E9C73E&displaylang=en
Microsoft Excel 97
-
Microsoft VBA64-KB822150-X86-ENU.exe
Microsoft® Visual Basic® for Applications Update - Q822150.
http://microsoft.com/downloads/details.aspx?FamilyId=DA1A7ABA-CD3D-458 B-9729-AB9094C9BD3F&displaylang=en
Microsoft Excel 2000 SP3
-
Microsoft office2000-kb822035-client-enu.exe
Office 2000 Security Patch: KB822035.
http://microsoft.com/downloads/details.aspx?FamilyId=E2CCE199-9C4A-4EE C-A3EC-9F738017F275&displaylang=en
Microsoft Access 2002 SP2
-
Microsoft officexp-kb822036-client-enu.exe
Office XP Security Patch: KB822036.
http://microsoft.com/downloads/details.aspx?FamilyId=6F1FC4B0-29E9-44E 0-A33D-AD6B4B6A8FF4&displaylang=en