Microsoft Office OneNote URI Handling Vulnerability - Secunia Advisories - Vulnerability Intelligence

Home > Vulnerability Intelligence > Secunia Advisories > Microsoft Office OneNote URI Handling Vulnerability

Secunia Advisories

Advisories

Advisories by Product

Business Solutions Restricted

Partner Solutions Restricted

About

Microsoft Office OneNote URI Handling Vulnerability
Secunia Advisory:	SA31744	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2008-09-09
Last Update:	2008-09-10
Popularity:	5,544 views

Critical:	Highly critical
Impact:	System access
Where:	From remote
Solution Status:	Vendor Patch

Software:	Microsoft Office 2003 Professional Edition Microsoft Office 2003 Small Business Edition Microsoft Office 2003 Standard Edition Microsoft Office 2003 Student and Teacher Edition Microsoft Office 2007 Microsoft Office OneNote 2007 Microsoft Office XP

Binary Analysis:	BA563 :: Available for 1 Credit

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2008-3007

Description: A vulnerability has been reported in Microsoft Office OneNote, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to missing input validation when processing a URI using the "onenote://" protocol handler. This can be exploited to e.g. place files on a user's system in semi-arbitrary locations or obtain all OneNote Notebooks from the user's system via a specially crafted OneNote URI. NOTE: According to the vendor, the vulnerability exists in a shared Office component, but can only be exploited on systems with OneNote 2007 installed. Solution: Apply patches. Microsoft Office XP SP3: http://www.microsoft.com/downloads/de...=ef3de64c-fc17-4500-9da4-a3bba97fda6d Microsoft Office 2003 SP2: http://www.microsoft.com/downloads/de...=e670ad22-d3c1-41f7-ba30-6a67139feaa3 Microsoft Office 2003 SP3: http://www.microsoft.com/downloads/de...=e670ad22-d3c1-41f7-ba30-6a67139feaa3 2007 Microsoft Office System: http://www.microsoft.com/downloads/de...=fb457536-26c5-428b-97e4-1fc13718266e 2007 Microsoft Office System SP1: http://www.microsoft.com/downloads/de...=fb457536-26c5-428b-97e4-1fc13718266e Microsoft Office OneNote 2007: http://www.microsoft.com/downloads/de...=8ac3576c-7873-4ac6-8bbc-033f6a7bb395 Microsoft Office OneNote 2007 SP1: http://www.microsoft.com/downloads/de...=8ac3576c-7873-4ac6-8bbc-033f6a7bb395 Provided and/or discovered by: Brett Moore, Insomnia Security. Changelog: 2008-09-10: Added additional information provided by Insomnia Security. Original Advisory: MS08-055 (KB955047): http://www.microsoft.com/technet/security/Bulletin/MS08-055.mspx Insomnia Security: http://www.insomniasec.com/advisories/ISVA-080910.1.htm Extended Solution: The "Extended Solution" section is available for Secunia customers only. Request a trial and get access to the Secunia Customer Area and Extended Secunia advisories.

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

Today

New advisories:	9
New vulnerabilities:	13
Updated advisories:	21

Not // 238 views

Sun Solaris NFS Local Denial of Service Vulnerability

Less // 358 views

Nokia Phones SMS Denial of Service Vulnerability

Moderately // 228 views

PHPAuctions Multiple Vulnerabilities

Less // 199 views

SemanticScuttle Cross-Site Request Forgery Vulnerabilities

Moderately // 241 views

SolucionWeb "id_area" SQL Injection Vulnerability

Moderately // 255 views

Ubuntu update for xterm

Less // 226 views

Poll Pro Cross-Site Request Forgery Vulnerability

Less // 261 views

Ubuntu update for samba

Less // 635 views

VMware "vmware-authd" Denial of Service Vulnerability

5th Jan, 2009

New advisories:	15
New vulnerabilities:	33
Updated advisories:	64

Moderately // 565 views

NPDS Multiple Vulnerabilities

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.