Geeks for your information
Third-Party Patch Available for Microsoft JET Database Zero-Day - Printable Version

+- Geeks for your information (https://www.geeks.fyi)
+-- Forum: News (https://www.geeks.fyi/forumdisplay.php?fid=105)
+--- Forum: Privacy & Security News (https://www.geeks.fyi/forumdisplay.php?fid=107)
+--- Thread: Third-Party Patch Available for Microsoft JET Database Zero-Day (/showthread.php?tid=3916)



Third-Party Patch Available for Microsoft JET Database Zero-Day - silversurfer - 25 September 18

Quote:An unofficial patch is already available for the unpatched Microsoft JET Database Engine vulnerability that Trend Micro's Zero Day Initiative (ZDI) made public last week.

Now, 0patch, a community project focused on resolving software vulnerabilities by delivering tiny fixes to users worldwide, says they were able to devise a patch for the bug less than a day after ZDI went public with their findings.

In a blog post detailing the fix, ACROS Security CEO Mitja Kolsek explains that, with JET only working on 32-bit systems, the proof-of-concept (PoC) code provided by ZDI would cause an error message on 64-bit systems, unless launched with wscript.exe.

Source: https://www.securityweek.com/third-party-patch-available-microsoft-jet-database-zero-day