Búsqueda de    
Vulnerabilidad   
    Buscar 219043 Descripciones CVE y
99761 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.801488
Categoría:Windows : Microsoft Bulletins
Título:Microsoft Internet Explorer Data Stream Handling Remote Code Execution Vulnerability (947864)
Resumen:This host is missing a critical security update according to; Microsoft Bulletin MS08-024.
Descripción:Summary:
This host is missing a critical security update according to
Microsoft Bulletin MS08-024.

Vulnerability Insight:
The flaw is due to a memory corruption error in Internet Explorer when
processing specially crafted data streams.

Vulnerability Impact:
Successful exploitation will allow attacker to execute arbitrary code with
the privileges of the application. Failed attacks may cause denial-of-service
conditions.

Affected Software/OS:
Microsoft Internet Explorer version 5.x/6.x/7.x.

Solution:
The vendor has released updates. Please see the references for more information.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Referencia Cruzada: BugTraq ID: 28552
Common Vulnerability Exposure (CVE) ID: CVE-2008-1085
http://www.securityfocus.com/bid/28552
Bugtraq: 20080414 Secunia Research: Internet Explorer Data Stream HandlingVulnerability (Google Search)
http://www.securityfocus.com/archive/1/490840/100/0/threaded
Cert/CC Advisory: TA08-099A
http://www.us-cert.gov/cas/techalerts/TA08-099A.html
HPdes Security Advisory: HPSBST02329
http://marc.info/?l=bugtraq&m=120845064910729&w=2
HPdes Security Advisory: SSRT080048
http://secunia.com/secunia_research/2007-100/advisory/
Microsoft Security Bulletin: MS08-024
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-024
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5563
http://www.securitytracker.com/id?1019801
http://secunia.com/advisories/27707
http://www.vupen.com/english/advisories/2008/1148/references
CopyrightCopyright (C) 2011 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2024 E-Soft Inc. Todos los derechos reservados.