A zero-day exploit taking advantage of a critical and unpatched vulnerability affecting Microsoft Visual Studio 6 has been observed in the wild. This vulnerability is caused by a buffer overflow error in the "Msmask32.ocx" ActiveX control (marked as safe) when processing a long "Mask" argument, allowing remote code execution via Internet Explorer.
Microsoft published eleven security advisories and addressed twenty-six vulnerabilities affecting Excel, Office Filters, Internet Explorer, MSCMS, IPsec, Outlook, Event System, Windows Messenger, and PowerPoint. Zero-day issues affecting Snapshot Viewer and Word have also been fixed.
Latest FrSIRT Security Advisories
FrSIRT Vulnerability Notification Service
Latest Linux Security Advisories
Customer Area
Username :
Password :
Forgot your password ?
Search
Mailinglist
Copyright 2003-2008 © FrSIRT.COM - Privacy Policy
French
