MS.Office.Access.ActiveX.Controls.Code.Execution

Release Date Jul 15, 2010
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a remote code-execution vulnerability in Microsoft Access. The vulnerability is due to an error when the vulnerable software instantiates three specific ActiveX controls in a particular order. A remote attacker may exploit this to execute arbitrary code.
Affected Products Microsoft Office Access 2003 Service Pack 3 Microsoft Office Access 2007 Service Pack 2 Microsoft Office Access 2007 Service Pack 1
Recommended Actions Apply the patch supplied by the vendor: http://www.microsoft.com/technet/security/Bulletin/MS10-044.mspx
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2010-0814
Reference/s http://technet.microsoft.com/en-us/security/bulletin/MS10-044.mspx (MS-ID) http://www.zerodayinitiative.com/advisories/ZDI-10-117

Fortinet