MS08-070: Vulnerabilities in Visual Basic 6.0 Runtime Extended Files (ActiveX Controls) could allow remote code execution

INTRODUCTION

Microsoft has released security bulletin MS08-070. To view the complete security bulletin, visit one of the following Microsoft Web sites:

How to obtain help and support for this security update


Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

More Information

Update removal information

For information about how to remove this update, refer to the individual Knowledge Base Articles that are listed in the "Additional information about this security update" section. The individual articles contain information about whether the updates may be uninstalled by using the Add or Remove Programs item in Control Panel.

Known issues with this security update

You install this security update on a computer that has a third-party software solution installed. The software solution is based on Microsoft Visual Basic for Applications (VBA). The software solution creates an instance of the control directly through Microsoft Office. In this scenario, you may experience either of the following problems:



  • You may receive an error message that resembles the following when you try to run a macro:


    Object library invalid or contains references to object definitions that could not be found.



    When this problem occurs, the macro does not run.

  • You may receive an error message that resembles the following when you try to add one of the updated controls to an Office Visual Basic for Applications form:



    Element not found.



    When this problem occurs, the control is not added to the form.



Solutions that do not use the control in VBA are not affected by this problem. Compiled Visual Basic 6.0 solutions are not affected. Web-based solutions are not affected. .NET solutions are not affected. Only VBA-based solutions that create an instance of the control directly through Office are affected.


To resolve this issue, install the cumulative update rollup for the Visual Basic 6.0 Service Pack 6 Runtime Extended Files update. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

957924Description of the cumulative update rollup for the Visual Basic 6.0 Service Pack 6 Runtime Extended Files
If you are using Office Visual Basic for Applications, you may also need to delete the cached versions of the control type libraries. To do this, search your hard drive for ".exd," and delete all the .exd files. The .exd files will be re-created automatically using the new controls the next time that you use VBA.

Additional information about this security update

For more information about this security update and for information about any known issues with specific releases of this software, click the following article numbers to view the articles in the Microsoft Knowledge Base:

  • 958369 MS08-070: Description of the security update for Microsoft Visual FoxPro 8.0 Service Pack 1: December 9, 2008

  • 958370 MS08-070: Description of the security update for Microsoft Visual FoxPro 9.0 Service Pack 1: December 9, 2008

  • 958371 MS08-070: Description of the security update for Microsoft Visual FoxPro 9.0 Service Pack 2: December 9, 2008

  • 958392 MS08-070: Description of the security update for the Microsoft Visual Studio .NET 2002 Service Pack 1 development platform: December 9, 2008

  • 958393 MS08-070: Description of the security update for Microsoft Visual Studio .NET 2003 Service Pack 1 development platform: December 9, 2008

  • 926857 MS08-070: Description of the security update for Microsoft Visual Basic 6.0 Service Pack 6 Runtime Extended Files: December 9, 2008

  • 957797 MS08-070: Description of the security update for Office XP: December 9, 2008

  • 949045 MS08-070: Description of the security update for Project 2003: December 9, 2008

  • 949046 MS08-070: Description of the security update for Project 2007: December 9, 2008

FILE INFORMATION

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Microsoft Visual FoxPro 8.0 Service Pack 1

File Name

Version

Date

Time

Size

Comct232.msm

20-Oct-2008

22:45

107,008

Comct232.ocx

6.0.98.12

11-Oct-2008

03:36

170,584

Mschrt20.msm

20-Oct-2008

22:45

495,104

Mschrt20.ocx

6.1.98.12

11-Oct-2008

03:36

1,030,984

Mscomct2.msm

20-Oct-2008

22:45

376,320

Mscomct2.ocx

6.1.98.12

11-Oct-2008

03:36

656,200

Msflxgrd.msm

20-Oct-2008

22:46

129,024

Msflxgrd.ocx

6.1.98.11

11-Oct-2008

03:36

259,912

Mshflxgd.msm

20-Oct-2008

22:46

220,160

Mshflxgd.ocx

6.1.98.12

11-Oct-2008

03:36

444,504

Msmask32.msm

20-Oct-2008

22:46

99,840

Msmask32.ocx

6.1.98.12

11-Oct-2008

03:36

179,528

Mswinsck.msm

20-Oct-2008

22:47

76,288

Mswinsck.ocx

6.1.98.12

11-Oct-2008

03:36

128,840

Microsoft Visual FoxPro 9.0 Service Pack 1

File Name

Version

Date

Time

Size

Comct232.msm

20-Oct-2008

22:45

107,008

Comct232.ocx

6.0.98.12

11-Oct-2008

03:36

170,584

Mschrt20.msm

20-Oct-2008

22:45

495,104

Mschrt20.ocx

6.1.98.12

11-Oct-2008

03:36

1,030,984

Mscomct2.msm

20-Oct-2008

22:45

376,320

Mscomct2.ocx

6.1.98.12

11-Oct-2008

03:36

656,200

Msflxgrd.msm

20-Oct-2008

22:46

129,024

Msflxgrd.ocx

6.1.98.11

11-Oct-2008

03:36

259,912

Mshflxgd.msm

20-Oct-2008

22:46

220,160

Mshflxgd.ocx

6.1.98.12

11-Oct-2008

03:36

444,504

Msmask32.msm

20-Oct-2008

22:46

99,840

Msmask32.ocx

6.1.98.12

11-Oct-2008

03:36

179,528

Mswinsck.msm

20-Oct-2008

22:47

76,288

Mswinsck.ocx

6.1.98.12

11-Oct-2008

03:36

128,840

Microsoft Visual FoxPro 9.0 Service Pack 2

File Name

Version

Date

Time

Size

Comct232.msm

14-Oct-2008

21:49

100,352

Comct232.ocx

6.0.98.12

11-Oct-2008

03:36

170,584

Mschrt20.msm

14-Oct-2008

21:49

495,104

Mschrt20.ocx

6.1.98.12

11-Oct-2008

03:36

1,030,984

Mscomct2.msm

14-Oct-2008

21:49

376,320

Mscomct2.ocx

6.1.98.12

11-Oct-2008

03:36

656,200

Msflxgrd.msm

14-Oct-2008

21:49

129,024

Msflxgrd.ocx

6.1.98.11

11-Oct-2008

03:36

259,912

Mshflxgd.msm

14-Oct-2008

21:49

220,160

Mshflxgd.ocx

6.1.98.12

11-Oct-2008

03:36

444,504

Msmask32.msm

14-Oct-2008

21:49

99,840

Msmask32.ocx

6.1.98.12

11-Oct-2008

03:36

179,528

Mswinsck.msm

14-Oct-2008

21:50

71,680

Mswinsck.ocx

6.1.98.12

11-Oct-2008

03:36

128,840

Tlbinf32.msm

16-Oct-2008

04:45

142,336

Microsoft Visual Studio .NET 2002 Service Pack 1 development platform

File Name

Version

Date

Time

Size

Mschrt20.ocx

6.1.98.12

10-Oct-2008

20:36

1,030,984

Mscomct2.ocx

1.0.0.1

15-Nov-2001

22:13

126,464

Msmask32.ocx

6.1.98.12

10-Oct-2008

20:36

179,528

Msmask32_x86.msm

15-Oct-2008

05:37

127,488

Msmask32_x86_chs.msm

16-Oct-2008

12:19

45,568

Msmask32_x86_cht.msm

16-Oct-2008

12:19

46,080

Msmask32_x86_deu.msm

15-Oct-2008

05:37

46,592

Msmask32_x86_enu.msm

14-Oct-2008

22:33

33,280

Msmask32_x86_esn.msm

16-Oct-2008

15:38

46,080

Msmask32_x86_fra.msm

16-Oct-2008

15:38

46,080

Msmask32_x86_ita.msm

16-Oct-2008

15:38

46,080

Msmask32_x86_jpn.msm

15-Oct-2008

05:37

46,080

Msmask32_x86_kor.msm

16-Oct-2008

12:19

46,080

Vb_control_mschart_rtl_x86_---.msm

15-Oct-2008

05:37

463,872

Vb_control_mschart_rtl_x86_chs.msm

16-Oct-2008

12:19

56,320

Vb_control_mschart_rtl_x86_cht.msm

16-Oct-2008

12:19

56,832

Vb_control_mschart_rtl_x86_deu.msm

15-Oct-2008

05:37

60,416

Vb_control_mschart_rtl_x86_enu.msm

14-Oct-2008

22:33

33,280

Vb_control_mschart_rtl_x86_esn.msm

16-Oct-2008

15:38

59,392

Vb_control_mschart_rtl_x86_fra.msm

16-Oct-2008

15:38

59,392

Vb_control_mschart_rtl_x86_ita.msm

16-Oct-2008

15:38

59,392

Vb_control_mschart_rtl_x86_jpn.msm

15-Oct-2008

05:37

57,856

Vb_control_mschart_rtl_x86_kor.msm

16-Oct-2008

12:19

57,344

Microsoft Visual Studio .NET 2003 Service Pack 1 development platform

File Name

Version

Date

Time

Size

Mschrt20.ocx

6.1.98.12

10-Oct-2008

20:36

1,030,984

Msmask32.ocx

6.1.98.12

10-Oct-2008

20:36

179,528

Msmask32_x86.msm

21-Oct-2008

20:29

127,488

Msmask32_x86_chs.msm

24-Oct-2008

23:29

46,080

Msmask32_x86_cht.msm

24-Oct-2008

23:29

46,592

Msmask32_x86_deu.msm

23-Oct-2008

00:23

47,104

Msmask32_x86_enu.msm

21-Oct-2008

20:29

33,280

Msmask32_x86_esn.msm

23-Oct-2008

00:23

46,592

Msmask32_x86_fra.msm

23-Oct-2008

00:23

46,592

Msmask32_x86_ita.msm

23-Oct-2008

00:23

46,592

Msmask32_x86_jpn.msm

21-Oct-2008

20:29

46,592

Msmask32_x86_kor.msm

24-Oct-2008

23:29

46,592

Vb_control_mschart_rtl_x86_---.msm

21-Oct-2008

20:29

465,408

Vb_control_mschart_rtl_x86_chs.msm

24-Oct-2008

23:29

56,832

Vb_control_mschart_rtl_x86_cht.msm

24-Oct-2008

23:29

57,344

Vb_control_mschart_rtl_x86_deu.msm

23-Oct-2008

00:23

60,928

Vb_control_mschart_rtl_x86_enu.msm

21-Oct-2008

20:29

33,280

Vb_control_mschart_rtl_x86_esn.msm

23-Oct-2008

00:23

59,904

Vb_control_mschart_rtl_x86_fra.msm

23-Oct-2008

00:23

59,904

Vb_control_mschart_rtl_x86_ita.msm

23-Oct-2008

00:23

59,904

Vb_control_mschart_rtl_x86_jpn.msm

21-Oct-2008

20:29

58,368

Vb_control_mschart_rtl_x86_kor.msm

24-Oct-2008

23:29

57,856

Microsoft Visual Basic 6.0 Service Pack 6 Runtime Extended Files

File Name

Version

Date

Time

Size

Comct232.cab

10-Oct-2008

20:41

87,859

Comct232.dep

10-Oct-2008

18:51

2,495

Comct232.ocx

6.0.98.12

10-Oct-2008

20:36

170,584

Mschrt20.cab

10-Oct-2008

20:42

453,997

Mschrt20.dep

10-Oct-2008

18:59

2,494

Mschrt20.ocx

6.1.98.12

10-Oct-2008

20:36

1,030,984

Mscomct2.cab

10-Oct-2008

20:42

336,516

Mscomct2.dep

10-Oct-2008

18:54

2,494

Mscomct2.ocx

6.1.98.12

10-Oct-2008

20:36

656,200

Msdatgrd.cab

10-Oct-2008

20:42

134,545

Msdatgrd.dep

10-Oct-2008

18:59

2,514

Msdatgrd.ocx

6.1.98.12

10-Oct-2008

20:36

279,368

Msflxgrd.cab

10-Oct-2008

20:42

113,567

Msflxgrd.dep

09-Oct-2008

23:45

2,494

Msflxgrd.ocx

6.1.98.11

10-Oct-2008

20:36

259,912

Mshflxgd.cab

10-Oct-2008

20:42

209,282

Mshflxgd.dep

10-Oct-2008

19:06

2,524

Mshflxgd.ocx

6.1.98.12

10-Oct-2008

20:36

444,504

Msmask32.cab

10-Oct-2008

20:41

91,429

Msmask32.dep

10-Oct-2008

18:55

2,494

Msmask32.ocx

6.1.98.12

10-Oct-2008

20:36

179,528

Mswinsck.cab

10-Oct-2008

20:41

65,565

Mswinsck.dep

10-Oct-2008

18:57

2,463

Mswinsck.ocx

6.1.98.12

10-Oct-2008

20:36

128,840

Microsoft Office XP

File name

File version

File size

Date

Time

Msflxgrd.ocx

6.1.98.6

262,144

30-Sep-2008

17:11

Microsoft Office Project 2003

File name

File version

File size

Date

Time

Mscomct2.ocx

6.1.98.11

658,432

11-Jun-2008

23:02

Msflxgrd.ocx

6.1.98.6

262,144

11-Jun-2008

23:02

Microsoft Office Project 2007

File name

File version

File size

Date

Time

Mscomct2.ocx

6.1.98.11

658,432

18-Sep-2008

05:17

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

Thank you for your feedback!

×