• info
• discussion
• exploit
• solution
• references

Microsoft Windows Cabinet File Viewer Cabview Validation Remote Code Execution Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.


Microsoft Cabinet File Viewer Shell Extension 6.0

• Microsoft Security Update for Windows Server 2003 (KB979309)
  http://www.microsoft.com/downloads/details.aspx?familyid=7AE9B1D0-0DBE -4ABD-B315-10CEA4CECCD7


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB979309)
  http://www.microsoft.com/downloads/details.aspx?familyid=811A2B28-655D -4B5D-821E-5A90D556DBA3


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB979309)
  http://www.microsoft.com/downloads/details.aspx?familyid=1709FD4E-D7C6 -4CBB-8B71-A96B8D6EEE58


• Microsoft Security Update for Windows Server 2008 (KB979309)
  http://www.microsoft.com/downloads/details.aspx?familyid=F111735B-68B0 -4BCC-9DD8-818A5ECA3400


• Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB979309)
  http://www.microsoft.com/downloads/details.aspx?familyid=EB116688-1D6E -4E20-948E-1D347AF5D985


• Microsoft Security Update for Windows Server 2008 x64 Edition (KB979309)
  http://www.microsoft.com/downloads/details.aspx?familyid=91C08251-0085 -44CB-9E9C-9A1A84374CAF


• Microsoft Security Update for Windows Vista (KB979309)
  http://www.microsoft.com/downloads/details.aspx?familyid=6145E2B2-36FD -4360-BD5B-2BD11890FC52


• Microsoft Security Update for Windows Vista for x64-based Systems (KB979309)
  http://www.microsoft.com/downloads/details.aspx?familyid=5B7EFA82-0FEB -413A-9F8E-212E7432CD99


• Microsoft Security Update for Windows XP (KB979309)
  http://www.microsoft.com/downloads/details.aspx?familyid=6C3AC102-2107 -4726-98BE-4FBF6B858BFB


• Microsoft Security Update for Windows XP x64 Edition (KB979309)
  http://www.microsoft.com/downloads/details.aspx?familyid=E64E487E-2727 -4396-B0C9-6EAF000214D2

Microsoft Cabinet File Viewer Shell Extension 6.1

• Microsoft Security Update for Windows 7 (KB979309)
  http://www.microsoft.com/downloads/details.aspx?familyid=F0DBAC52-0F0E -40BC-9371-17FA594424D5


• Microsoft Security Update for Windows 7 for x64-based Systems (KB979309)
  http://www.microsoft.com/downloads/details.aspx?familyid=B23EFE7D-BCA4 -4D49-9104-6AE39DC5DAA9


• Microsoft Security Update for Windows Server 2008 R2 for Itanium-based Systems (KB979309)
  http://www.microsoft.com/downloads/details.aspx?familyid=5E416D4B-5DE7 -4688-80C6-245DE159E0CE


• Microsoft Security Update for Windows Server 2008 R2 x64 Edition (KB979309)
  http://www.microsoft.com/downloads/details.aspx?familyid=A2979C02-2A80 -4B84-BF6C-4798064BDF28

Microsoft Cabinet File Viewer Shell Extension 5.1

• Microsoft Security Update for Windows 2000 (KB979309)
  http://www.microsoft.com/downloads/details.aspx?familyid=13846177-F25F -4DD4-9FE9-AC43E1D4D73D