I'n Blog 之萬象真藏

Secunia Advisory:	SA26754
Release Date:	2007-09-11
Critical:	Moderately critical
Impact:	System access
Where:	From remote
Solution Status:	Vendor Patch
Software:	Microsoft Visual Studio .NET 2002 Microsoft Visual Studio .NET 2003 Microsoft Visual Studio 2005
CVE reference:	CVE-2006-6133 (Secunia mirror)

Description:
A vulnerability has been reported in Visual Studio, which can be exploited by malicious people to compromise a user's system.

For more information:
SA23091

NOTE: Not all editions of Visual Studio 2002, 2003, and 2005 are affected. Please see the Microsoft security bulletin for details.

Solution:
Apply patches.

Visual Studio .NET 2002 Service Pack 1:
http://www.microsoft.com/downloads/de...=2608C83B-E1B2-4449-9A0E-1E566AAC3D76

Visual Studio .NET 2003:
http://www.microsoft.com/downloads/de...=D612AD41-5A0D-4E13-99EA-D6A5589786D6

Visual Studio .NET 2003 Service Pack 1:
http://www.microsoft.com/downloads/de...=0B10B04B-932C-4BFF-9CBC-B3EEB15064B1

Visual Studio 2005:
http://www.microsoft.com/downloads/de...=21073CC2-919C-40DF-8EBB-AA3DB06050D2

Visual Studio 2005 Service Pack 1:
http://www.microsoft.com/downloads/de...=967D43C8-EFBA-4221-BEB0-981E7DEEF33A

Provided and/or discovered by:
LSsecurity

Original Advisory:
MS07-052 (KB941522):
http://www.microsoft.com/technet/security/Bulletin/MS07-052.mspx

Other References:
SA23091:
http://secunia.com/advisories/23091

資料來源 http://secunia.com/advisories/26754/