Windows 7 Forums


Windows 7: Microsoft Office Web Components Zero Day Threat

14 Jul 2009   #1

Windows 7 Pro & Vista Home Premium
Pennsylvania
 
 
Microsoft Office Web Components Zero Day Threat

Microsoft Office Web Components Zero Day

Date:07.14.2009

Threat Type: Malicious Web Site / Malicious Code

Websense Security Labs ThreatSeeker is currently tracking exploit sites related to a new zero-day vulnerability in Microsoft Office Web Components. CVE-2009-1136 has been allocated to this vulnerability. The vulnerable component is an ActiveX object used by Internet Explorer to display and publish spreadsheets, charts, and databases to the Web. Microsoft Security Advisory 973472 offers a workaround for the zero-day and further technical information can be found on Microsoft's Security Research and Defense blog.

Details and Links

Additional Info:

http://isc.sans.org/diary.html?storyid=6778
http://www.microsoft.com/technet/security/advisory/973472.mspx
http://blogs.technet.com/msrc/archive/2009/07/13/microsoft-security-advisory-973472-released.aspx
http://www.eweek.com/c/a/Security/Microsoft-Warns-of-New-Attack-as-Patch-Tuesday-Nears-854317/
http://www.scmagazineus.com/Another-ActiveX-zero-day-bug-from-Microsoft/article/139939/
http://www.h-online.com/security/Microsoft-warns-of-vulnerability-in-Office-Web-Component--/news/113752
http://voices.washingtonpost.com/securityfix/2009/07/microsoft_newly_discovered_ms.html
http://www.computerworld.com/s/article/9135471/Microsoft_admits_new_ActiveX_zero_day_bug?source=rss_security


Last edited by reghakr; 14 Jul 2009 at 08:36 PM..
My System SpecsSystem Spec

14 Jul 2009   #2

Windows 7 RC Build7100
USA, NewYork
 
 

Quote   Quote: Originally Posted by reghakr View Post
Microsoft Office Web Components Zero Day

Date:07.14.2009

Threat Type: Malicious Web Site / Malicious Code

Websense Security Labs ThreatSeeker is currently tracking exploit sites related to a new zero-day vulnerability in Microsoft Office Web Components. CVE-2009-1136 has been allocated to this vulnerability. The vulnerable component is an ActiveX object used by Internet Explorer to display and publish spreadsheets, charts, and databases to the Web. Microsoft Security Advisory 973472 offers a workaround for the zero-day and further technical information can be found on Microsoft's Security Research and Defense blog.

Details and Links

Thanks for the info!!
My System SpecsSystem Spec
Reply

 Microsoft Office Web Components Zero Day Threat problems?



Thread Tools



Similar help and support threads for: Microsoft Office Web Components Zero Day Threat
Thread Forum
Microsoft: Conficker Worm Remains 'Ongoing' Threat Security News
Solved Microsoft Office Outlook 2007 problem when using Microsoft Office Microsoft Office
Win 7 Pro and Office components Microsoft Office
Microsoft downplays Windows BitLocker attack threat System Security
Microsoft: 'TaterF' Worm Top Malware Threat So Far This System Security


All times are GMT -5. The time now is 06:40 PM.


Seven Forums Android App Seven Forums IOS App Follow us on Facebook

Windows 7 Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows 7" and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32