Lucene search

K
mskbMicrosoftKB932349
HistoryApr 24, 2018 - 7:15 p.m.

MS08-070: Vulnerabilities in Visual Basic 6.0 Runtime Extended Files (ActiveX Controls) could allow remote code execution

2018-04-2419:15:57
Microsoft
support.microsoft.com
161

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

<html><body><p>Resolves vulnerabilities in Visual Basic 6.0 Runtime Extended Files (ActiveX Controls) that could allow remote code execution.</p><h2>INTRODUCTION</h2><div>Microsoft has released security bulletin MS08-070. To view the complete security bulletin, visit one of the following Microsoft Web sites:<br /><ul><li>Home users: <div><a href=“http://www.microsoft.com/protect/computer/updates/bulletins/200812.mspx” target=“_self”>http://www.microsoft.com/protect/computer/updates/bulletins/200812.mspx</a></div><span>Skip the details</span> Download the updates for your home computer or laptop from the Microsoft Update Web site now: <div><a href=“http://update.microsoft.com/microsoftupdate/” target=“_self”>http://update.microsoft.com/microsoftupdate/</a></div></li><li>IT professionals: <div><a href=“http://www.microsoft.com/technet/security/bulletin/ms08-070.mspx” target=“_self”>http://www.microsoft.com/technet/security/bulletin/ms08-070.mspx</a></div></li></ul><span><h3>How to obtain help and support for this security update</h3> <br />Help installing updates: <br /><a href=“https://support.microsoft.com/ph/6527” target=“_self”>Support for Microsoft Update</a><br /><br />Security solutions for IT professionals: <br /><a href=“http://technet.microsoft.com/security/bb980617.aspx” target=“_self”>TechNet Security Troubleshooting and Support</a><br /><br />Help protect your computer that is running Windows from viruses and malware:<br /><a href=“https://support.microsoft.com/contactus/cu_sc_virsec_master” target="self">Virus Solution and Security Center</a><br /><br />Local support according to your country: <br /><a href=“https://support.microsoft.com/common/international.aspx” target="self">International Support</a><br /><br /></span></div><h2>More Information</h2><div><h3>Update removal information</h3>For information about how to remove this update, refer to the individual Knowledge Base Articles that are listed in the “Additional information about this security update” section. The individual articles contain information about whether the updates may be uninstalled by using the <strong>Add or Remove Programs</strong> item in Control Panel.<h3>Known issues with this security update</h3>You install this security update on a computer that has a third-party software solution installed. The software solution is based on Microsoft Visual Basic for Applications (VBA). The software solution creates an instance of the control directly through Microsoft Office. In this scenario, you may experience either of the following problems:<br /><br /><br /><br /><ul><li> You may receive an error message that resembles the following when you try to run a macro:<br /><br /><div> <br />Object library invalid or contains references to object definitions that could not be found.<br /></div> <br /><br />When this problem occurs, the macro does not run. </li><li>You may receive an error message that resembles the following when you try to add one of the updated controls to an Office Visual Basic for Applications form:<br /><br /> <br /><div> <br />Element not found.<br /></div> <br /><br />When this problem occurs, the control is not added to the form.<br /><br /><br /><br /></li></ul>Solutions that do not use the control in VBA are not affected by this problem. Compiled Visual Basic 6.0 solutions are not affected. Web-based solutions are not affected. .NET solutions are not affected. Only VBA-based solutions that create an instance of the control directly through Office are affected.<br /> <br /><br />To resolve this issue, install the cumulative update rollup for the Visual Basic 6.0 Service Pack 6 Runtime Extended Files update. <span>For more information, click the following article number to view the article in the Microsoft Knowledge Base:<br /><div><a href=“https://support.microsoft.com/en-us/help/957924”>957924 </a>Description of the cumulative update rollup for the Visual Basic 6.0 Service Pack 6 Runtime Extended Files<br /></div></span>If you are using Office Visual Basic for Applications, you may also need to delete the cached versions of the control type libraries. To do this, search your hard drive for “.exd,” and delete all the .exd files. The .exd files will be re-created automatically using the new controls the next time that you use VBA.<h3>Additional information about this security update</h3> For more information about this security update and for information about any known issues with specific releases of this software, click the following article numbers to view the articles in the Microsoft Knowledge Base:<br /><ul><li><span><div><a href=“https://support.microsoft.com/en-us/help/958369”>958369 </a> MS08-070: Description of the security update for Microsoft Visual FoxPro 8.0 Service Pack 1: December 9, 2008<br /><br /></div></span></li><li><span><div><a href=“https://support.microsoft.com/en-us/help/958370”>958370 </a> MS08-070: Description of the security update for Microsoft Visual FoxPro 9.0 Service Pack 1: December 9, 2008<br /><br /></div></span></li><li><span><div><a href=“https://support.microsoft.com/en-us/help/958371”>958371 </a> MS08-070: Description of the security update for Microsoft Visual FoxPro 9.0 Service Pack 2: December 9, 2008<br /><br /></div></span></li><li><span><div><a href=“https://support.microsoft.com/en-us/help/958392”>958392 </a> MS08-070: Description of the security update for the Microsoft Visual Studio .NET 2002 Service Pack 1 development platform: December 9, 2008<br /><br /></div></span></li><li><span><div><a href=“https://support.microsoft.com/en-us/help/958393”>958393 </a> MS08-070: Description of the security update for Microsoft Visual Studio .NET 2003 Service Pack 1 development platform: December 9, 2008<br /><br /></div></span></li><li><span><div><a href=“https://support.microsoft.com/en-us/help/926857”>926857 </a> MS08-070: Description of the security update for Microsoft Visual Basic 6.0 Service Pack 6 Runtime Extended Files: December 9, 2008<br /><br /></div></span></li><li><span><div><a href=“https://support.microsoft.com/en-us/help/957797”>957797 </a> MS08-070: Description of the security update for Office XP: December 9, 2008<br /><br /></div></span></li><li><span><div><a href=“https://support.microsoft.com/en-us/help/949045”>949045 </a> MS08-070: Description of the security update for Project 2003: December 9, 2008<br /><br /></div></span></li><li><span><div><a href=“https://support.microsoft.com/en-us/help/949046”>949046 </a> MS08-070: Description of the security update for Project 2007: December 9, 2008<br /><br /></div></span></li></ul></div><h2>FILE INFORMATION</h2><div><span>The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the <strong>Time Zone</strong> tab in the <strong>Date and Time</strong> item in Control Panel.</span><h3>Microsoft Visual FoxPro 8.0 Service Pack 1</h3><div><table><tr><th>File Name</th><th>Version</th><th>Date</th><th>Time</th><th>Size</th></tr><tr><td>Comct232.msm</td><td></td><td>20-Oct-2008</td><td>22:45</td><td>107,008</td></tr><tr><td>Comct232.ocx</td><td>6.0.98.12</td><td>11-Oct-2008</td><td>03:36</td><td>170,584</td></tr><tr><td>Mschrt20.msm</td><td></td><td>20-Oct-2008</td><td>22:45</td><td>495,104</td></tr><tr><td>Mschrt20.ocx</td><td>6.1.98.12</td><td>11-Oct-2008</td><td>03:36</td><td>1,030,984</td></tr><tr><td>Mscomct2.msm</td><td></td><td>20-Oct-2008</td><td>22:45</td><td>376,320</td></tr><tr><td>Mscomct2.ocx</td><td>6.1.98.12</td><td>11-Oct-2008</td><td>03:36</td><td>656,200</td></tr><tr><td>Msflxgrd.msm</td><td></td><td>20-Oct-2008</td><td>22:46</td><td>129,024</td></tr><tr><td>Msflxgrd.ocx</td><td>6.1.98.11</td><td>11-Oct-2008</td><td>03:36</td><td>259,912</td></tr><tr><td>Mshflxgd.msm</td><td></td><td>20-Oct-2008</td><td>22:46</td><td>220,160</td></tr><tr><td>Mshflxgd.ocx</td><td>6.1.98.12</td><td>11-Oct-2008</td><td>03:36</td><td>444,504</td></tr><tr><td>Msmask32.msm</td><td></td><td>20-Oct-2008</td><td>22:46</td><td>99,840</td></tr><tr><td>Msmask32.ocx</td><td>6.1.98.12</td><td>11-Oct-2008</td><td>03:36</td><td>179,528</td></tr><tr><td>Mswinsck.msm</td><td></td><td>20-Oct-2008</td><td>22:47</td><td>76,288</td></tr><tr><td>Mswinsck.ocx</td><td>6.1.98.12</td><td>11-Oct-2008</td><td>03:36</td><td>128,840</td></tr></table></div><h3>Microsoft Visual FoxPro 9.0 Service Pack 1</h3><div><table><tr><th>File Name</th><th>Version</th><th>Date</th><th>Time</th><th>Size</th></tr><tr><td>Comct232.msm</td><td></td><td>20-Oct-2008</td><td>22:45</td><td>107,008</td></tr><tr><td>Comct232.ocx</td><td>6.0.98.12</td><td>11-Oct-2008</td><td>03:36</td><td>170,584</td></tr><tr><td>Mschrt20.msm</td><td></td><td>20-Oct-2008</td><td>22:45</td><td>495,104</td></tr><tr><td>Mschrt20.ocx</td><td>6.1.98.12</td><td>11-Oct-2008</td><td>03:36</td><td>1,030,984</td></tr><tr><td>Mscomct2.msm</td><td></td><td>20-Oct-2008</td><td>22:45</td><td>376,320</td></tr><tr><td>Mscomct2.ocx</td><td>6.1.98.12</td><td>11-Oct-2008</td><td>03:36</td><td>656,200</td></tr><tr><td>Msflxgrd.msm</td><td></td><td>20-Oct-2008</td><td>22:46</td><td>129,024</td></tr><tr><td>Msflxgrd.ocx</td><td>6.1.98.11</td><td>11-Oct-2008</td><td>03:36</td><td>259,912</td></tr><tr><td>Mshflxgd.msm</td><td></td><td>20-Oct-2008</td><td>22:46</td><td>220,160</td></tr><tr><td>Mshflxgd.ocx</td><td>6.1.98.12</td><td>11-Oct-2008</td><td>03:36</td><td>444,504</td></tr><tr><td>Msmask32.msm</td><td></td><td>20-Oct-2008</td><td>22:46</td><td>99,840</td></tr><tr><td>Msmask32.ocx</td><td>6.1.98.12</td><td>11-Oct-2008</td><td>03:36</td><td>179,528</td></tr><tr><td>Mswinsck.msm</td><td></td><td>20-Oct-2008</td><td>22:47</td><td>76,288</td></tr><tr><td>Mswinsck.ocx</td><td>6.1.98.12</td><td>11-Oct-2008</td><td>03:36</td><td>128,840</td></tr></table></div><h3>Microsoft Visual FoxPro 9.0 Service Pack 2</h3><div><table><tr><th>File Name</th><th>Version</th><th>Date</th><th>Time</th><th>Size</th></tr><tr><td>Comct232.msm</td><td></td><td>14-Oct-2008</td><td>21:49</td><td>100,352</td></tr><tr><td>Comct232.ocx</td><td>6.0.98.12</td><td>11-Oct-2008</td><td>03:36</td><td>170,584</td></tr><tr><td>Mschrt20.msm</td><td></td><td>14-Oct-2008</td><td>21:49</td><td>495,104</td></tr><tr><td>Mschrt20.ocx</td><td>6.1.98.12</td><td>11-Oct-2008</td><td>03:36</td><td>1,030,984</td></tr><tr><td>Mscomct2.msm</td><td></td><td>14-Oct-2008</td><td>21:49</td><td>376,320</td></tr><tr><td>Mscomct2.ocx</td><td>6.1.98.12</td><td>11-Oct-2008</td><td>03:36</td><td>656,200</td></tr><tr><td>Msflxgrd.msm</td><td></td><td>14-Oct-2008</td><td>21:49</td><td>129,024</td></tr><tr><td>Msflxgrd.ocx</td><td>6.1.98.11</td><td>11-Oct-2008</td><td>03:36</td><td>259,912</td></tr><tr><td>Mshflxgd.msm</td><td></td><td>14-Oct-2008</td><td>21:49</td><td>220,160</td></tr><tr><td>Mshflxgd.ocx</td><td>6.1.98.12</td><td>11-Oct-2008</td><td>03:36</td><td>444,504</td></tr><tr><td>Msmask32.msm</td><td></td><td>14-Oct-2008</td><td>21:49</td><td>99,840</td></tr><tr><td>Msmask32.ocx</td><td>6.1.98.12</td><td>11-Oct-2008</td><td>03:36</td><td>179,528</td></tr><tr><td>Mswinsck.msm</td><td></td><td>14-Oct-2008</td><td>21:50</td><td>71,680</td></tr><tr><td>Mswinsck.ocx</td><td>6.1.98.12</td><td>11-Oct-2008</td><td>03:36</td><td>128,840</td></tr><tr><td>Tlbinf32.msm</td><td></td><td>16-Oct-2008</td><td>04:45</td><td>142,336</td></tr></table></div><h3>Microsoft Visual Studio .NET 2002 Service Pack 1 development platform</h3><div><table><tr><th>File Name</th><th>Version</th><th>Date</th><th>Time</th><th>Size</th></tr><tr><td>Mschrt20.ocx</td><td>6.1.98.12</td><td>10-Oct-2008</td><td>20:36</td><td>1,030,984</td></tr><tr><td>Mscomct2.ocx</td><td>1.0.0.1</td><td>15-Nov-2001</td><td>22:13</td><td>126,464</td></tr><tr><td>Msmask32.ocx</td><td>6.1.98.12</td><td>10-Oct-2008</td><td>20:36</td><td>179,528</td></tr><tr><td>Msmask32_x86.msm</td><td></td><td>15-Oct-2008</td><td>05:37</td><td>127,488</td></tr><tr><td>Msmask32_x86_chs.msm</td><td></td><td>16-Oct-2008</td><td>12:19</td><td>45,568</td></tr><tr><td>Msmask32_x86_cht.msm</td><td></td><td>16-Oct-2008</td><td>12:19</td><td>46,080</td></tr><tr><td>Msmask32_x86_deu.msm</td><td></td><td>15-Oct-2008</td><td>05:37</td><td>46,592</td></tr><tr><td>Msmask32_x86_enu.msm</td><td></td><td>14-Oct-2008</td><td>22:33</td><td>33,280</td></tr><tr><td>Msmask32_x86_esn.msm</td><td></td><td>16-Oct-2008</td><td>15:38</td><td>46,080</td></tr><tr><td>Msmask32_x86_fra.msm</td><td></td><td>16-Oct-2008</td><td>15:38</td><td>46,080</td></tr><tr><td>Msmask32_x86_ita.msm</td><td></td><td>16-Oct-2008</td><td>15:38</td><td>46,080</td></tr><tr><td>Msmask32_x86_jpn.msm</td><td></td><td>15-Oct-2008</td><td>05:37</td><td>46,080</td></tr><tr><td>Msmask32_x86_kor.msm</td><td></td><td>16-Oct-2008</td><td>12:19</td><td>46,080</td></tr><tr><td>Vb_control_mschart_rtl_x86—.msm</td><td></td><td>15-Oct-2008</td><td>05:37</td><td>463,872</td></tr><tr><td>Vb_control_mschart_rtl_x86_chs.msm</td><td></td><td>16-Oct-2008</td><td>12:19</td><td>56,320</td></tr><tr><td>Vb_control_mschart_rtl_x86_cht.msm</td><td></td><td>16-Oct-2008</td><td>12:19</td><td>56,832</td></tr><tr><td>Vb_control_mschart_rtl_x86_deu.msm</td><td></td><td>15-Oct-2008</td><td>05:37</td><td>60,416</td></tr><tr><td>Vb_control_mschart_rtl_x86_enu.msm</td><td></td><td>14-Oct-2008</td><td>22:33</td><td>33,280</td></tr><tr><td>Vb_control_mschart_rtl_x86_esn.msm</td><td></td><td>16-Oct-2008</td><td>15:38</td><td>59,392</td></tr><tr><td>Vb_control_mschart_rtl_x86_fra.msm</td><td></td><td>16-Oct-2008</td><td>15:38</td><td>59,392</td></tr><tr><td>Vb_control_mschart_rtl_x86_ita.msm</td><td></td><td>16-Oct-2008</td><td>15:38</td><td>59,392</td></tr><tr><td>Vb_control_mschart_rtl_x86_jpn.msm</td><td></td><td>15-Oct-2008</td><td>05:37</td><td>57,856</td></tr><tr><td>Vb_control_mschart_rtl_x86_kor.msm</td><td></td><td>16-Oct-2008</td><td>12:19</td><td>57,344</td></tr></table></div><h3>Microsoft Visual Studio .NET 2003 Service Pack 1 development platform</h3><div><table><tr><th>File Name</th><th>Version</th><th>Date</th><th>Time</th><th>Size</th></tr><tr><td>Mschrt20.ocx</td><td>6.1.98.12</td><td>10-Oct-2008</td><td>20:36</td><td>1,030,984</td></tr><tr><td>Msmask32.ocx</td><td>6.1.98.12</td><td>10-Oct-2008</td><td>20:36</td><td>179,528</td></tr><tr><td>Msmask32_x86.msm</td><td></td><td>21-Oct-2008</td><td>20:29</td><td>127,488</td></tr><tr><td>Msmask32_x86_chs.msm</td><td></td><td>24-Oct-2008</td><td>23:29</td><td>46,080</td></tr><tr><td>Msmask32_x86_cht.msm</td><td></td><td>24-Oct-2008</td><td>23:29</td><td>46,592</td></tr><tr><td>Msmask32_x86_deu.msm</td><td></td><td>23-Oct-2008</td><td>00:23</td><td>47,104</td></tr><tr><td>Msmask32_x86_enu.msm</td><td></td><td>21-Oct-2008</td><td>20:29</td><td>33,280</td></tr><tr><td>Msmask32_x86_esn.msm</td><td></td><td>23-Oct-2008</td><td>00:23</td><td>46,592</td></tr><tr><td>Msmask32_x86_fra.msm</td><td></td><td>23-Oct-2008</td><td>00:23</td><td>46,592</td></tr><tr><td>Msmask32_x86_ita.msm</td><td></td><td>23-Oct-2008</td><td>00:23</td><td>46,592</td></tr><tr><td>Msmask32_x86_jpn.msm</td><td></td><td>21-Oct-2008</td><td>20:29</td><td>46,592</td></tr><tr><td>Msmask32_x86_kor.msm</td><td></td><td>24-Oct-2008</td><td>23:29</td><td>46,592</td></tr><tr><td>Vb_control_mschart_rtl_x86—.msm</td><td></td><td>21-Oct-2008</td><td>20:29</td><td>465,408</td></tr><tr><td>Vb_control_mschart_rtl_x86_chs.msm</td><td></td><td>24-Oct-2008</td><td>23:29</td><td>56,832</td></tr><tr><td>Vb_control_mschart_rtl_x86_cht.msm</td><td></td><td>24-Oct-2008</td><td>23:29</td><td>57,344</td></tr><tr><td>Vb_control_mschart_rtl_x86_deu.msm</td><td></td><td>23-Oct-2008</td><td>00:23</td><td>60,928</td></tr><tr><td>Vb_control_mschart_rtl_x86_enu.msm</td><td></td><td>21-Oct-2008</td><td>20:29</td><td>33,280</td></tr><tr><td>Vb_control_mschart_rtl_x86_esn.msm</td><td></td><td>23-Oct-2008</td><td>00:23</td><td>59,904</td></tr><tr><td>Vb_control_mschart_rtl_x86_fra.msm</td><td></td><td>23-Oct-2008</td><td>00:23</td><td>59,904</td></tr><tr><td>Vb_control_mschart_rtl_x86_ita.msm</td><td></td><td>23-Oct-2008</td><td>00:23</td><td>59,904</td></tr><tr><td>Vb_control_mschart_rtl_x86_jpn.msm</td><td></td><td>21-Oct-2008</td><td>20:29</td><td>58,368</td></tr><tr><td>Vb_control_mschart_rtl_x86_kor.msm</td><td></td><td>24-Oct-2008</td><td>23:29</td><td>57,856</td></tr></table></div><h3>Microsoft Visual Basic 6.0 Service Pack 6 Runtime Extended Files</h3><div><table><tr><th>File Name</th><th>Version</th><th>Date</th><th>Time</th><th>Size</th></tr><tr><td>Comct232.cab</td><td></td><td>10-Oct-2008</td><td>20:41</td><td>87,859</td></tr><tr><td>Comct232.dep</td><td></td><td>10-Oct-2008</td><td>18:51</td><td>2,495</td></tr><tr><td>Comct232.ocx</td><td>6.0.98.12</td><td>10-Oct-2008</td><td>20:36</td><td>170,584</td></tr><tr><td>Mschrt20.cab</td><td></td><td>10-Oct-2008</td><td>20:42</td><td>453,997</td></tr><tr><td>Mschrt20.dep</td><td></td><td>10-Oct-2008</td><td>18:59</td><td>2,494</td></tr><tr><td>Mschrt20.ocx</td><td>6.1.98.12</td><td>10-Oct-2008</td><td>20:36</td><td>1,030,984</td></tr><tr><td>Mscomct2.cab</td><td></td><td>10-Oct-2008</td><td>20:42</td><td>336,516</td></tr><tr><td>Mscomct2.dep</td><td></td><td>10-Oct-2008</td><td>18:54</td><td>2,494</td></tr><tr><td>Mscomct2.ocx</td><td>6.1.98.12</td><td>10-Oct-2008</td><td>20:36</td><td>656,200</td></tr><tr><td>Msdatgrd.cab</td><td></td><td>10-Oct-2008</td><td>20:42</td><td>134,545</td></tr><tr><td>Msdatgrd.dep</td><td></td><td>10-Oct-2008</td><td>18:59</td><td>2,514</td></tr><tr><td>Msdatgrd.ocx</td><td>6.1.98.12</td><td>10-Oct-2008</td><td>20:36</td><td>279,368</td></tr><tr><td>Msflxgrd.cab</td><td></td><td>10-Oct-2008</td><td>20:42</td><td>113,567</td></tr><tr><td>Msflxgrd.dep</td><td></td><td>09-Oct-2008</td><td>23:45</td><td>2,494</td></tr><tr><td>Msflxgrd.ocx</td><td>6.1.98.11</td><td>10-Oct-2008</td><td>20:36</td><td>259,912</td></tr><tr><td>Mshflxgd.cab</td><td></td><td>10-Oct-2008</td><td>20:42</td><td>209,282</td></tr><tr><td>Mshflxgd.dep</td><td></td><td>10-Oct-2008</td><td>19:06</td><td>2,524</td></tr><tr><td>Mshflxgd.ocx</td><td>6.1.98.12</td><td>10-Oct-2008</td><td>20:36</td><td>444,504</td></tr><tr><td>Msmask32.cab</td><td></td><td>10-Oct-2008</td><td>20:41</td><td>91,429</td></tr><tr><td>Msmask32.dep</td><td></td><td>10-Oct-2008</td><td>18:55</td><td>2,494</td></tr><tr><td>Msmask32.ocx</td><td>6.1.98.12</td><td>10-Oct-2008</td><td>20:36</td><td>179,528</td></tr><tr><td>Mswinsck.cab</td><td></td><td>10-Oct-2008</td><td>20:41</td><td>65,565</td></tr><tr><td>Mswinsck.dep</td><td></td><td>10-Oct-2008</td><td>18:57</td><td>2,463</td></tr><tr><td>Mswinsck.ocx</td><td>6.1.98.12</td><td>10-Oct-2008</td><td>20:36</td><td>128,840</td></tr></table></div><h3>Microsoft Office XP</h3><div><table><tr><th>File name</th><th>File version</th><th>File size</th><th>Date</th><th>Time</th></tr><tr><td>Msflxgrd.ocx</td><td>6.1.98.6</td><td>262,144</td><td>30-Sep-2008</td><td>17:11</td></tr></table></div><h3>Microsoft Office Project 2003</h3><div><table><tr><th>File name</th><th>File version</th><th>File size</th><th>Date</th><th>Time</th></tr><tr><td>Mscomct2.ocx</td><td>6.1.98.11</td><td>658,432</td><td>11-Jun-2008</td><td>23:02</td></tr><tr><td>Msflxgrd.ocx</td><td>6.1.98.6</td><td>262,144</td><td>11-Jun-2008</td><td>23:02</td></tr></table></div><h3>Microsoft Office Project 2007</h3><div><table><tr><th>File name</th><th>File version</th><th>File size</th><th>Date</th><th>Time</th></tr><tr><td>Mscomct2.ocx</td><td>6.1.98.11</td><td>658,432</td><td>18-Sep-2008</td><td>05:17</td></tr></table></div></div></body></html>

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C