Microsoft Access Snapshot Viewer ActiveX Control Vulnerability
Last Update Date:
28 Jan 2011
Release Date:
8 Jul 2008
5239
Views
RISK: Medium Risk
A vulnerability has been identified in the Snapshot Viewer for Microsoft Access, which could be exploited by remote attackers to take complete control of an affected system. This issue is caused by a design error in the "snapview.ocx" ActiveX control that does not restrict access to certain methods, which could be exploited by attackers to download files to arbitrary locations on a vulnerable system by tricking a user into visiting a specially crafted web page.
Note: This vulnerability is currently being exploited in the wild.
Impact
- Remote Code Execution
System / Technologies affected
- Microsoft Office Access 2000
- Microsoft Office Access 2002
- Microsoft Office Access 2003
- Microsoft Access Snapshot Viewer
Solutions
There is no patch available for this vulnerability currently.
Please consider the workaround provided by the vendor.
http://www.microsoft.com/technet/security/advisory/955179.mspx
Vulnerability Identifier
Source
Related Link
Share with