1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Unchecked buffer in Microsoft Access Snapshot Viewer

Discussion in 'Networking' started by eddie5659, Sep 4, 2003.

Thread Status:
Not open for further replies.
  1. eddie5659

    eddie5659 Moderator Malware Specialist Thread Starter

    Joined:
    Mar 19, 2001
    Messages:
    34,932
    Hiya

    With Microsoft Access Snapshot Viewer, you can distribute a snapshot
    of a Microsoft Access database that allows the snapshot to be viewed
    without having Access installed. For example, a customer may want to
    send a supplier an invoice that is generated by using an Access
    database. With Microsoft Access Snapshot Viewer, the customer can
    package the database so that the supplier can view it and print it
    without having Access installed.

    The Microsoft Access Snapshot Viewer is available with all versions
    of Access - though it is not installed by default - and is also
    available as a separate stand-alone. The Snapshot Viewer is
    implemented by using an ActiveX control.

    A vulnerability exists because of a flaw in the way that Snapshot
    Viewer validates parameters. Because the parameters are not correctly
    checked, a buffer overrun can occur, which could allow an attacker to
    execute the code of their choice in the security context of the
    logged-on user.

    For an attack to be successful, an attacker would have to persuade a
    user to visit a malicious Web site that is under the attacker's
    control.


    Maximum Severity Rating: Moderate

    Affected Software:

    Microsoft Access 97
    Microsoft Access 2000
    Microsoft Access 2002


    Download locations for this patch

    Access 2002:

    http://microsoft.com/downloads/deta...63-1BBE-4009-9DF8-52D3A916D54F&displaylang=en

    (administrative update only)

    http://microsoft.com/office/ork/xp/journ/snpv1001a.htm

    Access 2000:

    http://microsoft.com/downloads/deta...8E-16E3-422D-86DD-7ED5671FB8D4&displaylang=en

    (administrative update only)

    http://microsoft.com/office/ork/2000/journ/snpv0901.htm

    Access 97:

    Install the updated stand-alone Snapshot Viewer control. To do so, visit the following Microsoft Web site:

    http://www.microsoft.com/AccessDev/Articles/snapshot.htm

    Stand-alone Snapshot Viewer Control:

    http://www.microsoft.com/AccessDev/Articles/snapshot.htm

    http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-038.asp

    Regards

    eddie
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Similar Threads - Unchecked buffer Microsoft
  1. Supashaka
    Replies:
    25
    Views:
    945
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/162114

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice