Test Kennung:	1.3.6.1.4.1.25623.1.0.11885
Kategorie:	Windows : Microsoft Bulletins
Titel:	Buffer Overrun in the ListBox and in the ComboBox (824141)
Zusammenfassung:	A vulnerability exists because the ListBox control and the ComboBox control; both call a function, which is located in the User32.dll file, that contains a buffer overrun.
Beschreibung:	Summary: A vulnerability exists because the ListBox control and the ComboBox control both call a function, which is located in the User32.dll file, that contains a buffer overrun. Vulnerability Impact: An attacker who had the ability to log on to a system interactively could run a program that could send a specially-crafted Windows message to any applications that have implemented the ListBox control or the ComboBox control, causing the application to take any action an attacker specified. An attacker must have valid logon credentials to exploit the vulnerability. This vulnerability could not be exploited remotely. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0659 BugTraq ID: 8827 http://www.securityfocus.com/bid/8827 Bugtraq: 20031016 Listbox And Combobox Control Buffer Overflow (Google Search) http://marc.info/?l=bugtraq&m=106631999907035&w=2 http://www.cert.org/advisories/CA-2003-27.html CERT/CC vulnerability note: VU#967668 http://www.kb.cert.org/vuls/id/967668 Microsoft Security Bulletin: MS03-045 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-045 http://marc.info/?l=ntbugtraq&m=106632111408343&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A201 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A340 XForce ISS Database: win-user32-control-bo(13424) https://exchange.xforce.ibmcloud.com/vulnerabilities/13424
Copyright	Copyright (C) 2003 Jeff Adams

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.