• info
• discussion
• exploit
• solution
• references

Microsoft Visual Studio ATL 'VariantClear()' Remote Code Execution Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for details.


Microsoft Outlook 2007 SP2 0

• Microsoft Update for Microsoft Office Outlook 2007 (KB972363)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=d39234a3-c62c -44ba-a626-3179a183ca09

Microsoft Windows Vista Home Premium SP2

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Outlook 2007 SP1 0

• Microsoft Update for Microsoft Office Outlook 2007 (KB972363)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=d39234a3-c62c -44ba-a626-3179a183ca09

Microsoft Windows ATL Component 0

• Microsoft Security Update for Windows 2000 (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=c773149a-f4fc -486a-b718-6b8ff7a36ae2


• Microsoft Security Update for Windows Server 2003 (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=7d9369b5-0c54 -4c17-bc62-fba0a7b4728c


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=ad1791b3-8553 -4433-a9f7-8b4f857665be


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=90e0e014-ed7e -498a-9f61-18bb09a384b3


• Microsoft Security Update for Windows Server 2008 (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=ba423491-6c29 -49f2-811b-ac3f9bbc58fc


• Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=e5612bb4-5f37 -4b38-bd2e-f198c413371c


• Microsoft Security Update for Windows Server 2008 x64 Edition (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=b9311953-889a -415f-a396-250a005e95cd


• Microsoft Security Update for Windows Vista (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=80de158d-157e -4c21-9154-c1dbd6e57cb3


• Microsoft Security Update for Windows Vista for x64-based Systems (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=82940d30-6a30 -47ca-b184-2ac96e35c294


• Microsoft Security Update for Windows XP (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=4b4c6fc5-e8e6 -4d89-a181-e231240468f9


• Microsoft Security Update for Windows XP x64 Edition (KB973507)
  http://www.microsoft.com/downloads/details.aspx?familyid=2f2b93fc-f977 -4f23-af90-c27f744fad0a

Microsoft Windows Vista Home Basic SP1

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Windows XP Media Center Edition SP3

• Microsoft Security Update for Windows XP (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=46aa443c-4e7b -4bd5-8b4e-0068c3dc0e79&displaylang=en

Microsoft Windows CE 6.0

• Microsoft Security Update Windows Embedded CE 6.0 (KB974616)
  http://www.microsoft.com/downloads/details.aspx?familyid=99d114f8-4d95 -4075-a0f1-45f498f0ade8

Microsoft Windows Vista Enterprise

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Visual Studio 2005 SP1

• Microsoft Visual Studio 2005 Service Pack 1 ATL for Smart Devices Security Update
  http://www.microsoft.com/downloads/details.aspx?FamilyID=9d7ee45b-9892 -41b5-ac08-5fde9cde1b42&displaylang=en


• Microsoft Visual Studio 2005 Service Pack 1 ATL Security Update
  http://www.microsoft.com/downloads/details.aspx?FamilyID=7c8729dc-06a2 -4538-a90d-ff9464dc0197

Microsoft Windows Media Player 9.0

• Microsoft Security Update for Windows Media Player 9 for Windows 2000 (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=bd7c9fc4-61cb -4c23-9961-6d63f234731c


• Microsoft Security Update for Windows XP Service Pack 2 (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=34b2b14d-5811 -4635-ba83-f837dcb03d04


• Microsoft Security Update for Windows XP Service Pack 3 (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=ec84c98b-6bc7 -442f-9280-d6e204280b2f

Microsoft Windows Vista Ultimate SP2

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Windows Vista Home Basic SP2

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Microsoft MSWebDVD ActiveX Control 0

• Microsoft Security Update for Windows Server 2003 (KB973815)
  http://www.microsoft.com/downloads/details.aspx?familyid=301ad191-8d3f -41d3-b41c-e2e863893f73


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB973815)
  http://www.microsoft.com/downloads/details.aspx?familyid=5b8a8958-c3cd -4b24-85a2-1baacf92d218


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB973815)
  http://www.microsoft.com/downloads/details.aspx?familyid=2ae71a65-5eee -4dd2-bc79-b7c5a73022bc


• Microsoft Security Update for Windows XP (KB973815)
  http://www.microsoft.com/downloads/details.aspx?familyid=8b71bcc9-5146 -4afc-8847-0af21d7fad36


• Microsoft Security Update for Windows XP x64 Edition (KB973815)
  http://www.microsoft.com/downloads/details.aspx?familyid=85b2dcdb-cea9 -4c4a-8ebd-50264e781ade

Microsoft Windows Vista Home Basic

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Windows Vista Ultimate

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Windows Vista Home Premium SP1

• Microsoft Security Update for Windows Vista (KB973768)
  http://www.microsoft.com/downloads/details.aspx?familyid=59fefa17-0ad4 -4a62-82be-e6a2b7a0aec3&displaylang=en

Microsoft Visual Studio .NET 2003 SP1

• Microsoft Visual Studio .NET 2003 Service Pack 1 ATL Security Update
  http://www.microsoft.com/downloads/details.aspx?FamilyID=63ce454e-f69c -44e3-89fb-eb23c2e2154e

Microsoft Windows Media Player 10.0

• Microsoft Security Update for Windows Server 2003 (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=ab054890-983b -4414-ad0a-da1b2d2a4895


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=5890233a-d8f7 -490c-8bf5-3ed4bd1c6991


• Microsoft Security Update for Windows XP x64 Edition (KB973540)
  http://www.microsoft.com/downloads/details.aspx?familyid=bb98187a-8db9 -47e4-88ac-15544c5268f6