Test ID:	1.3.6.1.4.1.25623.1.0.900004
Category:	Windows
Title:	Microsoft Access Snapshot Viewer ActiveX Control Vulnerability
Summary:	Microsoft Access Snapshot in Microsoft Office Access is prone; to ActiveX control vulnerabilities.
Description:	Summary: Microsoft Access Snapshot in Microsoft Office Access is prone to ActiveX control vulnerabilities. Vulnerability Insight: Overview: Microsoft Access Snapshot in Microsoft Office Access is prone to ActiveX control vulnerabilities. The ActiveX control for viewing a snapshot of Microsoft Access report. A specially crafted Web site, when visited can inject arbitrary code because of a vulnerability in the ActiveX control. Vulnerability Impact: Exploitation involves convincing the victim to view an HTML document (eg., web page, HTML email, or email attachment). When a user views the web page, the vulnerability could allow remove code execution. Affected Software/OS: MS Access Snapshot (with/without) MS Office Access (2000/2002/2003) - Windows (All). Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2463 BugTraq ID: 30114 http://www.securityfocus.com/bid/30114 Cert/CC Advisory: TA08-189A http://www.us-cert.gov/cas/techalerts/TA08-189A.html Cert/CC Advisory: TA08-225A http://www.us-cert.gov/cas/techalerts/TA08-225A.html CERT/CC vulnerability note: VU#837785 http://www.kb.cert.org/vuls/id/837785 http://www.exploit-db.com/exploits/6124 HPdes Security Advisory: HPSBST02360 http://marc.info/?l=bugtraq&m=121915960406986&w=2 HPdes Security Advisory: SSRT080117 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6120 http://www.securitytracker.com/id?1020433 http://secunia.com/advisories/30883 http://www.vupen.com/english/advisories/2008/2012/references XForce ISS Database: microsoft-snapshotviewer-code-execution(43613) https://exchange.xforce.ibmcloud.com/vulnerabilities/43613
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.