MSMVPS.COM

The Ultimate Destination for Blogs by Current and Former Microsoft Most Valuable Professionals.
Welcome to MSMVPS.COM Sign in | Help
in Search

Harry Waldron - Microsoft MVP Blog

Security News and Best Practices for corporate and home users

Microsoft Security Advisory 950627 - Jet Database Engine Vulnerability

Folks should continue to be careful with any Office documents (e.g., Word, Excel, Powerpoint, Access, etc) received in email (or exchanged in other ways).  As the March security updates strengthened some of previous vulnerabilities, it is important to stay up-to-date on security updates Windows, Office, and all other software products.

Microsoft Security Advisory 950627 - Jet Database Engine Vulnerability
http://www.microsoft.com/technet/security/advisory/950627.mspx

QUOTE: Microsoft is investigating new public reports of very limited, targeted attacks using a vulnerability in the Microsoft Jet Database Engine that can be exploited through Microsoft Word. Customers running Windows Server 2003 Service Pack 2, Windows Vista, and Windows Vista Service Pack 1 are not vulnerable to the buffer overrun being attacked, as they include a version of the Microsoft Jet Database Engine that is not vulnerable to this issue.

Customers using Microsoft Word 2000 Service Pack 3, Microsoft Word 2002 Service Pack 3, Microsoft Word 2003 Service Pack 2, Microsoft Word 2003 Service Pack 3, Microsoft Word 2007, and Microsoft Word 2007 Service Pack 1 on Microsoft Windows 2000, Windows XP, or Windows Server 2003 Service Pack 1 are vulnerable to these attacks.

Microsoft is investigating the public reports and customer impact. We are also investigating whether the vulnerability can be exploited through additional applications. Upon completion of this investigation, Microsoft will take the appropriate action to help protect our customers. This may include providing a security update through our monthly release process or providing an out-of-cycle security update, depending on customer needs. At this time, we are aware only of targeted attacks that attempt to use this vulnerability. Current attacks require customers to take multiple steps in order to be successful; we believe the risk to be limited.

Only published comments... Mar 24 2008, 01:24 PM by Harry Waldron

Comments

 

david said:

Error 1919. Error configuring ODBC data source: MS Access Database, ODBC error 13: Could not load the setup or translator library. Verify that the file MS Access Database exists and that you can access it

Error 1904. Setup cannot register module C:\Program Files\Microsoft Office\OFFICE11\1033\MSRCLR40.DLL. If you click "Cancel" or "Ignore", run Setup again and reinstall or repair your Office installation. If the problem persists, contact your Information Technology department for assistance

Start > run > C:\>regsvr32 "C:\Program Files\Microsoft Office\OFFICE11\1033\MSRCLR40.DLL" > access is denied

Fix > echo y| cacls "%SystemRoot%\system32\msjet40.dll" /E /R everyone

April 12, 2008 11:54 AM

Leave a Comment

(required) 
(optional)
(required) 
Submit
Powered by Community Server (Commercial Edition), by Telligent Systems