• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Microsoft Windows Common AVI ActiveX Control File Parsing Buffer Overflow Vulnerability

Solution:
The vendor has released an advisory and updates to address this issue. Please see the references for more information.


Microsoft Project Standard 2007 SP 1

• Microsoft Security Update for Microsoft Office Project 2007 (KB949046)
  http://www.microsoft.com/downloads/details.aspx?familyid=2fbf6a5b-ff35 -4a2d-9fa0-4e62b6486fe6

Microsoft Visual FoxPro 8.0 SP1

• Microsoft Visual FoxPro 8.0 SP1 ActiveX Controls Security Update
  http://www.microsoft.com/downloads/details.aspx?familyid=A6977F81-F7F6 -486B-96AD-8D296D79F205

Microsoft Visual FoxPro 9.0 SP1

• Microsoft Visual FoxPro 9.0 SP1 ActiveX Controls Security Update
  http://www.microsoft.com/downloads/details.aspx?familyid=386D27A6-B2C7 -4ACC-BF3E-EDCBC7358172

Microsoft Visual Studio .NET 2003 SP1

• Microsoft Visual Studio .NET 2003 Service Pack 1 ActiveX Controls Security Update Rollup
  http://www.microsoft.com/downloads/details.aspx?familyid=6AC7CF8F-D046 -43A8-B4EF-253153D65AED

Microsoft Visual FoxPro 9.0 SP2

• Microsoft Visual FoxPro 9.0 SP2 ActiveX Controls Security Update
  http://www.microsoft.com/downloads/details.aspx?familyid=5B1F28A9-DA8D -463A-8AE4-DFC8FCC6C41A

Microsoft Project 2003 SP3

• Microsoft Security Update for Microsoft Office Project 2003 (KB949045)
  http://www.microsoft.com/downloads/details.aspx?familyid=89a44042-a629 -40f3-800a-0bb45fc36591

Microsoft Visual Basic 6.0

• Microsoft Microsoft Visual Basic 6.0 Service Pack 6 Cumulative Update
  http://www.microsoft.com/downloads/details.aspx?FamilyId=CB824E35-0403 -45C4-9E41-459F0EB89E36


• Microsoft Microsoft Visual Basic 6.0 Service Pack 6 Security Rollup Update
  http://www.microsoft.com/downloads/details.aspx?familyid=E27EEBCB-095D -43EC-A19E-4A46E591715C

Microsoft Project Professional 2007 0

• Microsoft Security Update for Microsoft Office Project 2007 (KB949046)
  http://www.microsoft.com/downloads/details.aspx?familyid=2fbf6a5b-ff35 -4a2d-9fa0-4e62b6486fe6

Microsoft Project Professional 2007 SP 1

• Microsoft Security Update for Microsoft Office Project 2007 (KB949046)
  http://www.microsoft.com/downloads/details.aspx?familyid=2fbf6a5b-ff35 -4a2d-9fa0-4e62b6486fe6

Microsoft Project Standard 2007 0

• Microsoft Security Update for Microsoft Office Project 2007 (KB949046)
  http://www.microsoft.com/downloads/details.aspx?familyid=2fbf6a5b-ff35 -4a2d-9fa0-4e62b6486fe6

Microsoft Visual Studio .NET 2002 SP1

• Microsoft Visual Studio .NET 2002 Service Pack 1 Security Update Rollup
  http://www.microsoft.com/downloads/details.aspx?familyid=AFAD980D-7F27 -49D9-AA23-B762C7B94CD6