US-CERT: hackers are attacking flaw in Microsoft Access

The US Computer Emergency Readiness Team (US-CERT) has warned that hackers are actively targeting a security flaw in the Microsoft Access system.

The US Computer Emergency Readiness Team (US-CERT) has warned that hackers are actively targeting a security flaw in the Microsoft Access system.

The government security agency says it is aware of a stack buffer overflow vulnerability in the way that Microsoft Access handles specially crafted database files.

Opening a specially crafted Microsoft Access Database file (".MDB") can cause arbitrary code execution without requiring any additional user interaction, said CERT.

As Microsoft Access files are considered to be high-risk, it may also be possible to execute arbitrary code without using a vulnerability in Microsoft Access, said CERT.

"US-CERT is aware of active exploitation using malicious Microsoft Access databases," said the agency.

CERT said users should not open attachments from unsolicited e-mail messages, and should block high-risk file attachments at e-mail gateways.




Read more on Antivirus, firewall and IDS products

SearchCIO
SearchSecurity
SearchNetworking
SearchDataCenter
SearchDataManagement
Close