Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.801488
Kategorie:Windows : Microsoft Bulletins
Titel:Microsoft Internet Explorer Data Stream Handling Remote Code Execution Vulnerability (947864)
Zusammenfassung:This host is missing a critical security update according to; Microsoft Bulletin MS08-024.
Beschreibung:Summary:
This host is missing a critical security update according to
Microsoft Bulletin MS08-024.

Vulnerability Insight:
The flaw is due to a memory corruption error in Internet Explorer when
processing specially crafted data streams.

Vulnerability Impact:
Successful exploitation will allow attacker to execute arbitrary code with
the privileges of the application. Failed attacks may cause denial-of-service
conditions.

Affected Software/OS:
Microsoft Internet Explorer version 5.x/6.x/7.x.

Solution:
The vendor has released updates. Please see the references for more information.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2008-1085
BugTraq ID: 28552
http://www.securityfocus.com/bid/28552
Bugtraq: 20080414 Secunia Research: Internet Explorer Data Stream HandlingVulnerability (Google Search)
http://www.securityfocus.com/archive/1/490840/100/0/threaded
Cert/CC Advisory: TA08-099A
http://www.us-cert.gov/cas/techalerts/TA08-099A.html
HPdes Security Advisory: HPSBST02329
http://marc.info/?l=bugtraq&m=120845064910729&w=2
HPdes Security Advisory: SSRT080048
http://secunia.com/secunia_research/2007-100/advisory/
Microsoft Security Bulletin: MS08-024
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-024
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5563
http://www.securitytracker.com/id?1019801
http://secunia.com/advisories/27707
http://www.vupen.com/english/advisories/2008/1148/references
CopyrightCopyright (C) 2011 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.