SkipNavigation
Home | FAQ | Contact | Privacy Policy
US-CERT
American Flag
  Vulnerability
Notes
Database

Search Vulnerability Notes

Vulnerability Notes Help Information


 
 View Notes By
  Name

ID Number

CVE Name

Date Public

Date Published

Date Updated

Severity Metric
 Other Documents
  Technical Alerts

Technical Bulletins

Alerts

Security Tips
 

Vulnerability Note VU#936529

Microsoft Jet Engine stack buffer overflow

Overview

The Microsoft Jet Engine contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.

I. Description

Microsoft Jet, or Joint Engine Technology, is a database engine that is used by several Microsoft products, including Access and Visual Basic. A Microsoft Access database uses the .MDB file extension by default. The Microsoft Jet Engine contains a stack buffer overflow in the handling of specially crafted database files.

Microsoft Word can link to Jet databases. In some cases, the database can be opened without prompting the user. This can allow Microsoft Word documents to be used as an attack vector for this vulnerability.

II. Impact

By convincing a user to open a specially crafted Word document or Jet database, such as a Microsoft Access .MDB file, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system.

III. Solution

We are currently unaware of a practical solution to this problem. Please consider the workarounds provided in Microsoft Security Advisory 950627, including

Restrict the Microsoft Jet Database Engine from running

To implement the workaround, enter the following command at a command prompt:

    echo y| cacls "%SystemRoot%\system32\msjet40.dll" /E /P everyone:N
Block MDB files from being processed through your mail infrastructure

To detect Jet files that have possibly been renamed to another file type, search for files with any of the following 15-byte signatures at location 0x4 (no quotes):
    "Jet System DB  "
    "Standard Jet DB"
    "Temp Jet DB    "
    "MSISAM Database"

Systems Affected
VendorStatusDate Updated
Microsoft CorporationVulnerable22-Mar-2008

References

http://www.kb.cert.org/vuls/id/176380
http://blogs.technet.com/msrc/archive/2008/03/24/update-msrc-blog-microsoft-security-advisory-950627.aspx
http://www.microsoft.com/technet/security/advisory/950627.mspx
http://www.symantec.com/enterprise/security_response/weblog/2008/03/another_reason_why_microsoft_s.html
http://ruder.cdut.net/blogview.asp?logID=227
http://archives.neohapsis.com/archives/fulldisclosure/2007-11/0392.html

Credit

This vulnerability was publicly reported by cocoruder.

This document was written by Will Dormann.

Other Information

Date Public11/16/2007
Date First Published03/22/2008 12:32:16 PM
Date Last Updated04/29/2008
CERT Advisory 
CVE NameCVE-2007-6026; CVE-2008-1092
US-CERT Technical Alerts 
Metric58.22
Document Revision28

If you have feedback, comments, or additional information about this vulnerability, please send us email.
 

 
Page Corner Image
Produced 2008 by US-CERT, a government organization
Disclaimers and copyright information
Get Adobe Reader Get Adobe Reader