MS08-070: Vulnerabilities in Visual Basic 6.0 Runtime Extended Files (ActiveX Controls) could allow remote code execution

INTRODUCTION

Microsoft has released security bulletin MS08-070. To view the complete security bulletin, visit one of the following Microsoft Web sites:

How to obtain help and support for this security update

Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

More Information

Update removal information

For information about how to remove this update, refer to the individual Knowledge Base Articles that are listed in the "Additional information about this security update" section. The individual articles contain information about whether the updates may be uninstalled by using the Add or Remove Programs item in Control Panel.

Known issues with this security update

You install this security update on a computer that has a third-party software solution installed. The software solution is based on Microsoft Visual Basic for Applications (VBA). The software solution creates an instance of the control directly through Microsoft Office. In this scenario, you may experience either of the following problems:

  • You may receive an error message that resembles the following when you try to run a macro:

    Note

    Object library invalid or contains references to object definitions that could not be found.

    When this problem occurs, the macro does not run.

  • You may receive an error message that resembles the following when you try to add one of the updated controls to an Office Visual Basic for Applications form:

    Note

    Element not found.

    When this problem occurs, the control is not added to the form.

Solutions that do not use the control in VBA are not affected by this problem. Compiled Visual Basic 6.0 solutions are not affected. Web-based solutions are not affected. .NET solutions are not affected. Only VBA-based solutions that create an instance of the control directly through Office are affected.

To resolve this issue, install the cumulative update rollup for the Visual Basic 6.0 Service Pack 6 Runtime Extended Files update. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

957924 Description of the cumulative update rollup for the Visual Basic 6.0 Service Pack 6 Runtime Extended Files
If you are using Office Visual Basic for Applications, you may also need to delete the cached versions of the control type libraries. To do this, search your hard drive for ".exd," and delete all the .exd files. The .exd files will be re-created automatically using the new controls the next time that you use VBA.

Additional information about this security update

For more information about this security update and for information about any known issues with specific releases of this software, click the following article numbers to view the articles in the Microsoft Knowledge Base:

  • 958369 MS08-070: Description of the security update for Microsoft Visual FoxPro 8.0 Service Pack 1: December 9, 2008

  • 958370 MS08-070: Description of the security update for Microsoft Visual FoxPro 9.0 Service Pack 1: December 9, 2008

  • 958371 MS08-070: Description of the security update for Microsoft Visual FoxPro 9.0 Service Pack 2: December 9, 2008

  • 958392 MS08-070: Description of the security update for the Microsoft Visual Studio .NET 2002 Service Pack 1 development platform: December 9, 2008

  • 958393 MS08-070: Description of the security update for Microsoft Visual Studio .NET 2003 Service Pack 1 development platform: December 9, 2008

  • 926857 MS08-070: Description of the security update for Microsoft Visual Basic 6.0 Service Pack 6 Runtime Extended Files: December 9, 2008

  • 957797 MS08-070: Description of the security update for Office XP: December 9, 2008

  • 949045 MS08-070: Description of the security update for Project 2003: December 9, 2008

  • 949046 MS08-070: Description of the security update for Project 2007: December 9, 2008

FILE INFORMATION

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Microsoft Visual FoxPro 8.0 Service Pack 1

File Name Version Date Time Size
Comct232.msm 20-Oct-2008 22:45 107,008
Comct232.ocx 6.0.98.12 11-Oct-2008 03:36 170,584
Mschrt20.msm 20-Oct-2008 22:45 495,104
Mschrt20.ocx 6.1.98.12 11-Oct-2008 03:36 1,030,984
Mscomct2.msm 20-Oct-2008 22:45 376,320
Mscomct2.ocx 6.1.98.12 11-Oct-2008 03:36 656,200
Msflxgrd.msm 20-Oct-2008 22:46 129,024
Msflxgrd.ocx 6.1.98.11 11-Oct-2008 03:36 259,912
Mshflxgd.msm 20-Oct-2008 22:46 220,160
Mshflxgd.ocx 6.1.98.12 11-Oct-2008 03:36 444,504
Msmask32.msm 20-Oct-2008 22:46 99,840
Msmask32.ocx 6.1.98.12 11-Oct-2008 03:36 179,528
Mswinsck.msm 20-Oct-2008 22:47 76,288
Mswinsck.ocx 6.1.98.12 11-Oct-2008 03:36 128,840

Microsoft Visual FoxPro 9.0 Service Pack 1

File Name Version Date Time Size
Comct232.msm 20-Oct-2008 22:45 107,008
Comct232.ocx 6.0.98.12 11-Oct-2008 03:36 170,584
Mschrt20.msm 20-Oct-2008 22:45 495,104
Mschrt20.ocx 6.1.98.12 11-Oct-2008 03:36 1,030,984
Mscomct2.msm 20-Oct-2008 22:45 376,320
Mscomct2.ocx 6.1.98.12 11-Oct-2008 03:36 656,200
Msflxgrd.msm 20-Oct-2008 22:46 129,024
Msflxgrd.ocx 6.1.98.11 11-Oct-2008 03:36 259,912
Mshflxgd.msm 20-Oct-2008 22:46 220,160
Mshflxgd.ocx 6.1.98.12 11-Oct-2008 03:36 444,504
Msmask32.msm 20-Oct-2008 22:46 99,840
Msmask32.ocx 6.1.98.12 11-Oct-2008 03:36 179,528
Mswinsck.msm 20-Oct-2008 22:47 76,288
Mswinsck.ocx 6.1.98.12 11-Oct-2008 03:36 128,840

Microsoft Visual FoxPro 9.0 Service Pack 2

File Name Version Date Time Size
Comct232.msm 14-Oct-2008 21:49 100,352
Comct232.ocx 6.0.98.12 11-Oct-2008 03:36 170,584
Mschrt20.msm 14-Oct-2008 21:49 495,104
Mschrt20.ocx 6.1.98.12 11-Oct-2008 03:36 1,030,984
Mscomct2.msm 14-Oct-2008 21:49 376,320
Mscomct2.ocx 6.1.98.12 11-Oct-2008 03:36 656,200
Msflxgrd.msm 14-Oct-2008 21:49 129,024
Msflxgrd.ocx 6.1.98.11 11-Oct-2008 03:36 259,912
Mshflxgd.msm 14-Oct-2008 21:49 220,160
Mshflxgd.ocx 6.1.98.12 11-Oct-2008 03:36 444,504
Msmask32.msm 14-Oct-2008 21:49 99,840
Msmask32.ocx 6.1.98.12 11-Oct-2008 03:36 179,528
Mswinsck.msm 14-Oct-2008 21:50 71,680
Mswinsck.ocx 6.1.98.12 11-Oct-2008 03:36 128,840
Tlbinf32.msm 16-Oct-2008 04:45 142,336

Microsoft Visual Studio .NET 2002 Service Pack 1 development platform

File Name Version Date Time Size
Mschrt20.ocx 6.1.98.12 10-Oct-2008 20:36 1,030,984
Mscomct2.ocx 1.0.0.1 15-Nov-2001 22:13 126,464
Msmask32.ocx 6.1.98.12 10-Oct-2008 20:36 179,528
Msmask32_x86.msm 15-Oct-2008 05:37 127,488
Msmask32_x86_chs.msm 16-Oct-2008 12:19 45,568
Msmask32_x86_cht.msm 16-Oct-2008 12:19 46,080
Msmask32_x86_deu.msm 15-Oct-2008 05:37 46,592
Msmask32_x86_enu.msm 14-Oct-2008 22:33 33,280
Msmask32_x86_esn.msm 16-Oct-2008 15:38 46,080
Msmask32_x86_fra.msm 16-Oct-2008 15:38 46,080
Msmask32_x86_ita.msm 16-Oct-2008 15:38 46,080
Msmask32_x86_jpn.msm 15-Oct-2008 05:37 46,080
Msmask32_x86_kor.msm 16-Oct-2008 12:19 46,080
Vb_control_mschart_rtl_x86_---.msm 15-Oct-2008 05:37 463,872
Vb_control_mschart_rtl_x86_chs.msm 16-Oct-2008 12:19 56,320
Vb_control_mschart_rtl_x86_cht.msm 16-Oct-2008 12:19 56,832
Vb_control_mschart_rtl_x86_deu.msm 15-Oct-2008 05:37 60,416
Vb_control_mschart_rtl_x86_enu.msm 14-Oct-2008 22:33 33,280
Vb_control_mschart_rtl_x86_esn.msm 16-Oct-2008 15:38 59,392
Vb_control_mschart_rtl_x86_fra.msm 16-Oct-2008 15:38 59,392
Vb_control_mschart_rtl_x86_ita.msm 16-Oct-2008 15:38 59,392
Vb_control_mschart_rtl_x86_jpn.msm 15-Oct-2008 05:37 57,856
Vb_control_mschart_rtl_x86_kor.msm 16-Oct-2008 12:19 57,344

Microsoft Visual Studio .NET 2003 Service Pack 1 development platform

File Name Version Date Time Size
Mschrt20.ocx 6.1.98.12 10-Oct-2008 20:36 1,030,984
Msmask32.ocx 6.1.98.12 10-Oct-2008 20:36 179,528
Msmask32_x86.msm 21-Oct-2008 20:29 127,488
Msmask32_x86_chs.msm 24-Oct-2008 23:29 46,080
Msmask32_x86_cht.msm 24-Oct-2008 23:29 46,592
Msmask32_x86_deu.msm 23-Oct-2008 00:23 47,104
Msmask32_x86_enu.msm 21-Oct-2008 20:29 33,280
Msmask32_x86_esn.msm 23-Oct-2008 00:23 46,592
Msmask32_x86_fra.msm 23-Oct-2008 00:23 46,592
Msmask32_x86_ita.msm 23-Oct-2008 00:23 46,592
Msmask32_x86_jpn.msm 21-Oct-2008 20:29 46,592
Msmask32_x86_kor.msm 24-Oct-2008 23:29 46,592
Vb_control_mschart_rtl_x86_---.msm 21-Oct-2008 20:29 465,408
Vb_control_mschart_rtl_x86_chs.msm 24-Oct-2008 23:29 56,832
Vb_control_mschart_rtl_x86_cht.msm 24-Oct-2008 23:29 57,344
Vb_control_mschart_rtl_x86_deu.msm 23-Oct-2008 00:23 60,928
Vb_control_mschart_rtl_x86_enu.msm 21-Oct-2008 20:29 33,280
Vb_control_mschart_rtl_x86_esn.msm 23-Oct-2008 00:23 59,904
Vb_control_mschart_rtl_x86_fra.msm 23-Oct-2008 00:23 59,904
Vb_control_mschart_rtl_x86_ita.msm 23-Oct-2008 00:23 59,904
Vb_control_mschart_rtl_x86_jpn.msm 21-Oct-2008 20:29 58,368
Vb_control_mschart_rtl_x86_kor.msm 24-Oct-2008 23:29 57,856

Microsoft Visual Basic 6.0 Service Pack 6 Runtime Extended Files

File Name Version Date Time Size
Comct232.cab 10-Oct-2008 20:41 87,859
Comct232.dep 10-Oct-2008 18:51 2,495
Comct232.ocx 6.0.98.12 10-Oct-2008 20:36 170,584
Mschrt20.cab 10-Oct-2008 20:42 453,997
Mschrt20.dep 10-Oct-2008 18:59 2,494
Mschrt20.ocx 6.1.98.12 10-Oct-2008 20:36 1,030,984
Mscomct2.cab 10-Oct-2008 20:42 336,516
Mscomct2.dep 10-Oct-2008 18:54 2,494
Mscomct2.ocx 6.1.98.12 10-Oct-2008 20:36 656,200
Msdatgrd.cab 10-Oct-2008 20:42 134,545
Msdatgrd.dep 10-Oct-2008 18:59 2,514
Msdatgrd.ocx 6.1.98.12 10-Oct-2008 20:36 279,368
Msflxgrd.cab 10-Oct-2008 20:42 113,567
Msflxgrd.dep 09-Oct-2008 23:45 2,494
Msflxgrd.ocx 6.1.98.11 10-Oct-2008 20:36 259,912
Mshflxgd.cab 10-Oct-2008 20:42 209,282
Mshflxgd.dep 10-Oct-2008 19:06 2,524
Mshflxgd.ocx 6.1.98.12 10-Oct-2008 20:36 444,504
Msmask32.cab 10-Oct-2008 20:41 91,429
Msmask32.dep 10-Oct-2008 18:55 2,494
Msmask32.ocx 6.1.98.12 10-Oct-2008 20:36 179,528
Mswinsck.cab 10-Oct-2008 20:41 65,565
Mswinsck.dep 10-Oct-2008 18:57 2,463
Mswinsck.ocx 6.1.98.12 10-Oct-2008 20:36 128,840

Microsoft Office XP

File name File version File size Date Time
Msflxgrd.ocx 6.1.98.6 262,144 30-Sep-2008 17:11

Microsoft Office Project 2003

File name File version File size Date Time
Mscomct2.ocx 6.1.98.11 658,432 11-Jun-2008 23:02
Msflxgrd.ocx 6.1.98.6 262,144 11-Jun-2008 23:02

Microsoft Office Project 2007

File name File version File size Date Time
Mscomct2.ocx 6.1.98.11 658,432 18-Sep-2008 05:17