Monday, September 24, 2018

Vulnerability In Microsoft Windows JET Database Engine

There has been found a critical vulnerability in Microsoft Windows JET Database Engine. By exploiting the vulnerability an attacker may execute arbitrary code in vulnerable system under the context of the current process. To exploit the vulnerability user interaction is needed.

At the moment there's no patch available against the vulnerability. In the absence of a fix special caution should be exercised without opening suspicious and from untrusted sources received files.

More information in Zero Day Initiative's blog post.

No comments: