Update Protection against Uniform Resource Locator Validation Error Vulnerability (MS08-055)
| Check Point Reference: | CPAI-2008-138 | |
| Date Published: | ||
| Severity: | ||
| Last Updated: | ||
| Source: | Microsoft Security Bulletin MS08-055 | |
| Industry Reference(s): | CVE-2008-3007 | |
| Protection Provided by: |
VPN-1
|
|
| Who is Vulnerable? Microsoft Office 2000 SP3 Microsoft Office OneNote 2003 SP2 Microsoft Office OneNote 2003 SP3 Microsoft Office 2004 for Mac Microsoft Office 2008 for Mac Microsoft Visual Studio 2008 Visual Studio 2008 SP1 Microsoft Expression Web Microsoft Expression Web 2 | ||
| Vulnerability Description A remote code execution vulnerability has been reported in the way that Microsoft Office handles specially crafted OneNote files. Microsoft Office OneNote is a tool for note-taking, information gathering, and multi-user collaboration that visualizes notes as a two-dimensional page. A remote attacker might exploit this vulnerability to take complete control of an affected system. |
||
|
Update/Patch Available Apply patches: Microsoft Security Bulletin MS08-055 |
|
|
Vulnerability Details The vulnerability is due to a validation error when a specially crafted uniform resource locator is passed to open a specially crafted OneNote file. A remote attacker might trigger this issue by persuading a user to click on a specially crafted uniform resource locator that references a specially crafted OneNote file. Successful exploitation of this vulnerability could allow the attacker to gain complete control over an affected system. |
Protection Overview
By enabling this protection, SmartDefense will detect and block attempts to exploit this vulnerability. Depending on the traffic mix, activating this protection may result in performance degradation.
In order for the protection to be activated, update your VPN-1/InterSpect product to the latest SmartDefense update. For information on how to update SmartDefense, go to SBP-2006-05, Protection tab and select the version of your choice.
To configure the defense, select your product from the list below and follow the related protection steps.