[PCWorks] Microsoft Office ActiveX Controls Multiple Vulnerabilities

TITLE:
Microsoft Office ActiveX Controls Multiple Vulnerabilities

Critical: Highly critical
Impact: Security Bypass, Exposure of sensitive information,
System access
Where: From remote

SECUNIA ADVISORY ID:
SA37005

VERIFY ADVISORY:
http://secunia.com/advisories/37005/

DESCRIPTION:
Some vulnerabilities have been reported in Microsoft Office,
which
can be exploited by malicious people to potentially bypass
security
features, gain knowledge of sensitive information, or
compromise a
user's system.

The vulnerabilities are caused due to the use of a vulnerable
Active
Template Library (ATL) version.

For more information:
SA35967

SOLUTION:
Apply patches.

Microsoft Office XP SP3 with Microsoft Outlook 2002 SP3:
http://www.microsoft.com/downloads/details.aspx?FamilyId=04878c2c-eb97-426f-be08-89036a6799db

Microsoft Office 2003 SP3 with Microsoft Office Outlook 2003
SP3:
http://www.microsoft.com/downloads/details.aspx?FamilyId=79e2b2e8-d5e8-4014-b489-720af2b5083d

Microsoft Office 2007 SP1/SP2 with Microsoft Office Outlook
2007
SP1/SP2:
http://www.microsoft.com/downloads/details.aspx?FamilyId=d39234a3-c62c-44ba-a626-3179a183ca09

Microsoft Office Visio Viewer 2007, 2007 SP1, or 2007 SP2:
http://www.microsoft.com/downloads/details.aspx?FamilyId=d20004c5-dd01-459e-8120-5f127e20c085

Microsoft Office Visio 2002/2003 Viewer:
The vendor recommends an upgrade to Microsoft Office Visio
Viewer 2007. The vulnerability is additionally mitigated by
MS09-034.

ORIGINAL ADVISORY:
Microsoft (972363, 973702, 973705, 973965):
http://www.microsoft.com/technet/security/bulletin/ms09-060.mspx

OTHER REFERENCES:
SA35967:
http://secunia.com/advisories/35967/

=========================
The list's FAQ's can be seen by sending an email to
PCWorks-request@xxxxxxxxxxxxx with FAQ in the subject line.

To unsubscribe, subscribe, set Digest or Vacation to on or off, go to
//www.freelists.org/list/pcworks . You can also send an email to
PCWorks-request@xxxxxxxxxxxxx with Unsubscribe in the subject line. Your
member list settings can be found at
//www.freelists.org/cgi-bin/lsg2.cgi/l=pcworks . Once logged in, you have
access to numerous other email options.

The list archives are located at //www.freelists.org/archives/pcworks/ .
All email posted to the list will be placed there in the event anyone needs to
look for previous posts.
-zxdjhu-