• info
• discussion
• exploit
• solution
• references

Microsoft Virtual Machine com.ms.activeX.ActiveXComponent Arbitrary Program Execution Vulnerability

Solution:
Microsoft has released patches which eliminate this vulnerability (patches for VM Series 2000 will be released shortly). Microsoft has provided the following instructions in order to determine the version of Virtual Machine you are running:

Open a command window:
1) Windows NT or Windows 2000, choose "Start", then "Run", then type "CMD" and hit the enter key.
2) On Windows 95, 98, or Windows Me choose "Start", then "Run" then type "COMMAND" and hit the enter key.
3) At the command prompt, type "JVIEW" and hit the enter key.
4) The version information will be at the right of the topmost line. It will have a format like "5.00.xxxx", where the "xxxx" is the build number. For example, if the version number is 5.00.1234, you have build number 1234.


Microsoft Virtual Machine 3100 Series

• Microsoft Q275609
  http://www.microsoft.com/java/vm/dl_vm40.htm

Microsoft Virtual Machine 3200 Series

• Microsoft Q275609
  http://www.microsoft.com/java/vm/dl_vm40.htm

Microsoft Virtual Machine 3300 Series

• Microsoft Q275609
  http://www.microsoft.com/java/vm/dl_vm40.htm