• info
• discussion
• exploit
• solution
• references

Microsoft Visual Studio Active Template Library COM Object Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references for more information.


Microsoft Outlook 2007 SP2 0

• Microsoft Update for Microsoft Office Outlook 2007 (KB972363)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=d39234a3-c62c -44ba-a626-3179a183ca09

Microsoft Windows Server 2008 for 32-bit Systems SP2

• Microsoft Cumulative Security Update for ActiveX Killbits for Windows Server 2008 (KB973525)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=51eb56fa-8204 -45f3-86d7-6d03a2c8d78d

Microsoft Windows Vista Home Premium SP2

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Outlook 2007 SP1 0

• Microsoft Update for Microsoft Office Outlook 2007 (KB972363)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=d39234a3-c62c -44ba-a626-3179a183ca09

Microsoft Windows ATL Component 0

• Microsoft Security Update for Windows 2000 (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=c773149a-f4fc -486a-b718-6b8ff7a36ae2


• Microsoft Security Update for Windows Server 2003 (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=7d9369b5-0c54 -4c17-bc62-fba0a7b4728c


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=ad1791b3-8553 -4433-a9f7-8b4f857665be


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=90e0e014-ed7e -498a-9f61-18bb09a384b3


• Microsoft Security Update for Windows Server 2008 (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=ba423491-6c29 -49f2-811b-ac3f9bbc58fc


• Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=e5612bb4-5f37 -4b38-bd2e-f198c413371c


• Microsoft Security Update for Windows Server 2008 x64 Edition (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=b9311953-889a -415f-a396-250a005e95cd


• Microsoft Security Update for Windows Vista (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=80de158d-157e -4c21-9154-c1dbd6e57cb3


• Microsoft Security Update for Windows Vista for x64-based Systems (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=82940d30-6a30 -47ca-b184-2ac96e35c294


• Microsoft Security Update for Windows XP (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=4b4c6fc5-e8e6 -4d89-a181-e231240468f9


• Microsoft Security Update for Windows XP x64 Edition (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=2f2b93fc-f977 -4f23-af90-c27f744fad0a

Microsoft Windows Vista Home Basic SP1

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Windows XP Tablet PC Edition SP2

• Microsoft Cumulative Security Update for ActiveX Killbits for Windows XP (KB973525)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=171d43d3-669c -4923-b266-e47591833c05

Microsoft Windows XP Media Center Edition SP3

• Microsoft Cumulative Security Update for ActiveX Killbits for Windows XP (KB973525)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=171d43d3-669c -4923-b266-e47591833c05


• Microsoft Security Update for Windows XP (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=46aa443c-4e7b -4bd5-8b4e-0068c3dc0e79&displaylang=en

Microsoft Windows CE 6.0

• Microsoft Security Update Windows Embedded CE 6.0 (KB974616)
  http://www.microsoft.com/downloads/details.aspx?familyid=99d114f8-4d95 -4075-a0f1-45f498f0ade8

Microsoft Windows 7 for 32-bit Systems 0

• Microsoft Cumulative Security Update for ActiveX Killbits for Windows 7 (KB973525)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=b64bcc14-38a7 -45b9-8f85-acc573777506

Microsoft Windows Server 2003 Web Edition SP2

• Microsoft Security Update for ActiveX Killbits for Windows Server 2003 (KB973525)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=f3249c99-82e4 -45dc-a254-28e647e822c8

Microsoft Windows Vista Enterprise

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Windows XP Professional x64 Edition SP2

• Microsoft Cumulative Security Update for ActiveX Killbits for Windows XP (KB973525)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=171d43d3-669c -4923-b266-e47591833c05


• Microsoft Cumulative Security Update for ActiveX Killbits for Windows XP x64 Edition (KB973525)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=c08623bf-94bc -4c50-8c10-f50fb8448a0b&displaylang=en

Microsoft Internet Explorer 6.0 SP1

• Microsoft Update for Internet Explorer 6 SP1 (KB976325)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=7fb6261c-6895 -4f79-be2c-bb110874a19c

Microsoft Visual Studio 2005 SP1

• Microsoft Visual Studio 2005 Service Pack 1 ATL for Smart Devices Security Update
  http://www.microsoft.com/downloads/details.aspx?FamilyID=9d7ee45b-9892 -41b5-ac08-5fde9cde1b42&displaylang=en


• Microsoft Visual Studio 2005 Service Pack 1 ATL Security Update
  http://www.microsoft.com/downloads/details.aspx?FamilyID=7c8729dc-06a2 -4538-a90d-ff9464dc0197

Microsoft Windows Media Player 9.0

• Microsoft Security Update for Windows Media Player 9 for Windows 2000 (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=bd7c9fc4-61cb -4c23-9961-6d63f234731c


• Microsoft Security Update for Windows XP Service Pack 2 (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=34b2b14d-5811 -4635-ba83-f837dcb03d04


• Microsoft Security Update for Windows XP Service Pack 3 (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=ec84c98b-6bc7 -442f-9280-d6e204280b2f

Microsoft Windows Vista x64 Edition SP1

• Microsoft Cumulative Security Update for ActiveX Killbits for Windows Vista for x64-based Systems (KB973525)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=7216bcb1-ff16 -402b-ad1b-1500d46d0157

Microsoft Windows Vista Ultimate SP2

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Windows Vista Home Basic SP2

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Windows Server 2008 for x64-based Systems 0

• Microsoft Cumulative Security Update for ActiveX Killbits for Windows Server 2008 x64 Edition (KB973525)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=131b047a-ae93 -4a99-83e5-71d5a79e96ea

Microsoft Microsoft MSWebDVD ActiveX Control 0

• Microsoft Security Update for Windows Server 2003 (KB973815)
  http://www.microsoft.com/downloads/details.aspx?familyid=301ad191-8d3f -41d3-b41c-e2e863893f73


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB973815)
  http://www.microsoft.com/downloads/details.aspx?familyid=5b8a8958-c3cd -4b24-85a2-1baacf92d218


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB973815)
  http://www.microsoft.com/downloads/details.aspx?familyid=2ae71a65-5eee -4dd2-bc79-b7c5a73022bc


• Microsoft Security Update for Windows XP (KB973815)
  http://www.microsoft.com/downloads/details.aspx?familyid=8b71bcc9-5146 -4afc-8847-0af21d7fad36


• Microsoft Security Update for Windows XP x64 Edition (KB973815)
  http://www.microsoft.com/downloads/details.aspx?familyid=85b2dcdb-cea9 -4c4a-8ebd-50264e781ade

Microsoft Windows Vista Home Basic

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Windows Server 2008 for Itanium-based Systems SP2

• Microsoft Cumulative Security Update for ActiveX Killbits for Windows Server 2008 for Itanium-based Systems (K
  http://www.microsoft.com/downloads/details.aspx?FamilyID=3d16c5bf-ee5c -4220-9755-5cb92eac2aae

Microsoft Windows 2000 Advanced Server SP4

• Microsoft Cumulative Security Update for ActiveX Killbits for Windows 2000 (KB973525)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=edfea805-9544 -4dc0-a52c-d7594205657b

Microsoft Windows Vista Ultimate

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Windows Vista Home Premium SP1

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Windows 7 for x64-based Systems 0

• Microsoft Cumulative Security Update for ActiveX Killbits for Windows 7 for x64-based Systems (KB973346)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=809e29f3-ec68 -4a2b-b04e-11759dd16001