OSVDB ID: 43464

Title: Microsoft Jet Database Engine Word File Handling Unspecified Code Execution

Info

Disclosure

Mar 22, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Unknown or Incomplete

Classification

Attack Type: Input Manipulation
Impact: Loss of Integrity
Disclosure: Uncoordinated Disclosure, Discovered in the Wild

Solution

Unknown or Incomplete

Products

Unknown or Incomplete

References

Security Tracker: 1019686
CVE ID: 2008-1092 (see also: NVD)
Bugtraq ID: 28398
ISS X-Force ID: 41380
CERT VU: 936529
Microsoft Knowledge Base Article: 950627
Other Advisory URL: http://ruder.cdut.net/blogview.asp?logID=227
http://www.hexview.com/docs/20050331-1.txt
News Article: http://www.eweek.com/c/a/Security/Exploit-Code-Posted-for-Microsoft-Jet-DB-Engine-Flaw/
http://www.eweek.com/c/a/Security/Microsoft-Confirms-Jet-DB-Flaw-MS-Word-Attacks/

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/43464