Microsoft Office Access contains a flaw related to the Microsoft Access Wizard Controls in ACCWIZ.dll. The issue is triggered when an attacker loads three specific controls in a specific order. This may allow a context-dependent attacker to execute arbitrary code via a crafted web site.

Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability.

• CVE ID: 2010-0814 (see also: NVD)
• Secunia Advisory ID: 40554
• Bugtraq ID: 41442
• SCIP VulDB ID: 4145
• Related OSVDB ID: 66295
• Microsoft Knowledge Base Article: 979440 981716
• Mail List Post: http://seclists.org/bugtraq/2010/Jul/87
• News Article: http://www.darkreading.com/vulnerability_management/security/app-security/showArticle.jhtml?articleID=225800088
  http://www.scmagazineus.com/microsoft-fixes-ormandy-zero-day-four-other-bugs/article/174504/
• Other Advisory URL: http://www.zerodayinitiative.com/advisories/ZDI-10-117
• Microsoft Security Bulletin: MS10-044

• Anonymous - Zero Day Initiative (ZDI)