Title: Unchecked Buffer in MDAC Function Could Enable System Compromise
(823718)
Date: August 20, 2003
Software: Microsoft Data Access Components 2.5; Microsoft Data Access
Components 2.6; Microsoft Data Access Components 2.7
Impact: Run code of the attacker's choice
Maximum Severity Rating: Important
Bulletin: MS03-033
The Microsoft Security Response Center has released Microsoft Security
Bulletin MS03-033
What Is It?
The Microsoft Security Response Center has released Microsoft Security
Bulletin MS03-033 which concerns a vulnerability in Microsoft Data
Access Components versions listed above. Customers are advised to
review the information in the bulletin and test and deploy the patch in
their environments, if applicable.
More information is now available at
http://www.microsoft.com/technet/security/bulletin/MS03-033.asp
If you have any questions regarding the patch or its implementation
after reading the above listed bulletin you should contact Product
Support Services in the United States at 1-866-PCSafety
(1-866-727-2338). International customers should contact their local
subsidiary.
--
"Don't lose sight of security. Security is a state of being,
not a state of budget. He with the most firewalls still does
not win. Put down that honeypot and keep up to date on your
patches. Demand better security from vendors and hold them
responsible. Use what you have, and make sure you know how
to use it properly and effectively."
~Rain Forest Puppy
http://www.wiretrip.net/rfp/txt/evolution.txt