Update Protection against Microsoft Office Web Components Multiple ActiveX Controls Remote Code Execution Vulnerability (MS09-043)
| Check Point Reference: | CPAI-2009-121 | |
| Date Published: | ||
| Severity: | ||
| Last Updated: | ||
| Source: | Microsoft Security Bulletin MS09-043 Microsoft Security Bulletin MS09-055 |
|
| Industry Reference(s): | CVE-2009-0562 CVE-2009-1136 CVE-2009-1534 CVE-2009-2493 CVE-2009-2496 |
|
| Protection Provided by: |
Security Gateway
|
|
| Who is Vulnerable? Microsoft Office XP SP3 Microsoft Office 2003 SP3 Microsoft Office XP Web Components Microsoft Office 2003 Web Components Microsoft Office 2003 Web Components for the 2007 Microsoft Office system SP1 Microsoft Internet Security and Acceleration Server 2004 Standard Edition SP3 Microsoft Internet Security and Acceleration Server 2004 Enterprise Edition SP3 Microsoft Internet Security and Acceleration Server 2006 Internet Security and Acceleration Server 2006 Supportability Update Microsoft Internet Security and Acceleration Server 2006 SP1 Microsoft Office Small Business Accounting 2006 | ||
| Vulnerability Description Multiple remote code execution vulnerabilities have been reported in Microsoft Office Web Components ActiveX Controls. Microsoft Office Web Components are a collection of Component Object Model (COM) controls for publishing spreadsheets, charts, and databases to the Web, and for viewing the published components on the Web. A remote attacker can exploit these vulnerabilities by convincing a user to visit a specially crafted Web page. Successful exploitation could result in execution of arbitrary code on the affected system. |
||
|
Update/Patch Available Apply patches: Microsoft Security Bulletin MS09-043 Microsoft Security Bulletin MS09-055 |
|
|
Vulnerability Details The vulnerabilities are due to a memory corruption error in the Microsoft Office Web Components ActiveX controls that fails to correctly handle parameter values when they are used in Internet Explorer. A remote attacker could exploit this issue by convincing a user to visit a malicious Web page. Successful exploitation of these vulnerabilities could allow remote code execution on the affected system. |
Protection Overview
This protection will detect and block the Office Web Components vulnerable ActiveX controls.
Note that this is an enhancement of a previously released Office Web Components protection.
In order for the protection to be activated, update your Security Gateway/VPN-1 product to the latest IPS/SmartDefense update. For information on how to update IPS/SmartDefense, go to SBP-2006-05, Protection tab and select the version of your choice.
To configure the defense, select your product from the list below and follow the related protection steps.