CERT-In Advisory CIAD-2008-25
Multiple Vulnerabilities in Microsoft Windows, Microsoft word, Microsoft Jet Database Engine and Microsoft Malware Protection Engine
Original issue date:
May 14, 2008
Systems Affected
- Microsoft Windows 2000 SP4
- Windows XP SP2
- Windows Server 2003 SP1
- Microsoft Office
- Microsoft Word
- Microsoft Outlook
- Microsoft Publisher
- Microsoft Malware Protection Engine
Overview
Multiple Vulnerabilities have been reported in various Microsoft Windows, Microsoft word, Microsoft Jet Database Engine and Microsoft Malware Protection Engine
Description
The vulnerability notes released by CERT-In with reference to Microsoft Security Bulletins are given below:
| Microsoft Security Bulletin |
Severity |
CERT-In Vulnerability Notes |
| MS08-026:Vulnerabilities in Microsoft Word Could Allow Remote Code Execution |
High |
CIVN-2008-57: Microsoft Word Memory corruption Remote Code Execution Vulnerabilities |
| MS08-027:Vulnerability in Microsoft Publisher Could Allow Remote Code Execution |
High |
CIVN-2008-58: Microsoft Publisher Object Handler Validation Vulnerability |
| MS08-028:Vulnerability in Microsoft Jet Database Engine Could Allow Remote Code Execution |
High |
CIVN-2007-159:
(Updated: May 14, 2008)
Microsoft Jet Database Engine MDB File Parsing Remote Buffer Overflow Vulnerability |
| MS08-029:Vulnerabilities in Microsoft Malware Protection Engine Could Allow Denial of Service |
Medium |
CIVN-2008-59: Microsoft Malware Protection Engine Input Validation Vulnerability |
Solution
Apply appropriate patches as mentioned in Microsoft Security Bulletin May 2008
http://www.microsoft.com/technet/security/bulletin/ms08-may.mspx
Vendor Information
Microsoft Corporation
http://www.microsoft.com/technet/security/bulletin/ms08-may.mspx
Disclaimer
The information provided herein is on "as is" basis, without warranty of any kind.
Contact Information

Phone: +91-11-24368572
Postal address
Indian Computer Emergency Response Team (CERT-In)
Ministry of Communications and Information Technology
Electronics Niketan
6, C.G.O. Complex
New Delhi-110 003

|