Microsoft Access Snapshot Viewer file download vulnerability
Added: 07/11/2008CVE: CVE-2008-2463
BID: 30144
OSVDB: 46749
Background
The Snapshot Viewer for Microsoft Access is used to display report snapshots without needing to fully invoke Access. It enables an ActiveX control in snapview.ocx.Problem
The Snapshot Viewer ActiveX control allows remote files to be downloaded to arbitrary locations on the user's computer. This could allow command execution by a malicious web page which downloads an executable file to the Startup folder. The file would then be executed the next time the user logs in.Resolution
Set the kill bit on the ActiveX control as described in Microsoft Security Advisory 955179.References
http://www.kb.cert.org/vuls/id/837785Limitations
Exploit requires a user to load the exploit page into Internet Explorer. The connection is established after the user logs out and logs in again.Platforms
WindowsBack to exploit index