Microsoft Security Bulletin MS02-065

From: Jerry Bryant [MS] (jbryant@online.microsoft.com)
Date: 11/20/02


From: "Jerry Bryant [MS]" <jbryant@online.microsoft.com>
Date: Wed, 20 Nov 2002 10:46:33 -0800

Title: Buffer Overrun in Microsoft Data Access Components Could Lead to Code
Execution (Q329414)
Date: November 20, 2002
Software:
Microsoft Data Access Components (MDAC) 2.1
Microsoft Data Access Components (MDAC) 2.5
Microsoft Data Access Components (MDAC) 2.6
Microsoft Internet Explorer 5.01
Microsoft Internet Explorer 5.5
Microsoft Internet Explorer 6.0
Note: The vulnerability does not affect Windows XP, despite the fact that it
uses Internet Explorer 6.0. Windows XP customers do not need to take any
action.
Impact: Run code of attacker's choice
Maximum Severity Rating: Critical
Bulletin: MS02-065

The Microsoft Security Response Center has released Microsoft Security
Bulletin MS02-065

What Is It?
The Microsoft Security Response Center has released Microsoft Security
Bulletin MS02-065 which concerns a vulnerability in Microsoft Data Access
Components in the versions listed above. Customers are advised to review
the information in the bulletin and test and deploy the patch in their
environments, if applicable.

More information is now available at
http://www.microsoft.com/technet/security/bulletin/MS02-065.asp

If you have any questions regarding the patch or its implementation after
reading the above listed bulletin you should contact Product Support
Services in the United States at 1-866-PCSafety (1-866-727-2338) or post in
this newsgroup. International customers should contact their local
subsidiary.

-- 
Regards,
Jerry Bryant - MCSE, MCDBA
Microsoft IT Communities
Get Secure! http://www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights. 


Relevant Pages

  • Re: MDAC
    ... Without knowing too many details you could try installing the latest version ... MDAC you'll see links to the different versions there. ... > updatimg Microsoft data Access Components 2.5 on your ...
    (microsoft.public.windowsxp.newusers)
  • Re: MDAC
    ... The MDAC files are needed on your system for various applications. ... > updatimg Microsoft data Access Components 2.5 on your ... see the download page relating to this release of ...
    (microsoft.public.windowsxp.newusers)
  • RE: MDAC Check
    ... Microsoft Data Access Components 2.1 ... Microsoft Data Access Components 2.1 SP2 ... "This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.data.ado)
  • Re: Why is msado26.tlb missing
    ... MDAC: Microsoft Data Access Components ... It looks like you've given me the same URL (for the checker ...
    (microsoft.public.access.gettingstarted)
  • Re: mail merge hanging up
    ... Are your MDAC components current? ... Overview and History of Office 97 Patches ... Microsoft Data Access Components release history ...
    (microsoft.public.word.application.errors)