Test Kennung:	1.3.6.1.4.1.25623.1.0.801713
Kategorie:	Windows : Microsoft Bulletins
Titel:	Microsoft Outlook Express And Windows Mail NNTP Protocol Heap Buffer Overflow Vulnerability (941202)
Zusammenfassung:	This host is missing a critical security update according to; Microsoft Bulletin MS07-056.
Beschreibung:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS07-056. Vulnerability Insight: The flaw is due to a boundary error in 'inetcomm.dll' when processing NNTP (Network News Transfer Protocol) responses. Vulnerability Impact: Successful exploitation leads to cause a heap-based buffer overflow by returning more data than requested by the client. Affected Software/OS: - Microsoft Windows XP Service Pack 2 and prior - Microsoft Windows 2000 Service Pack 4 and prior - Microsoft Windows 2K3 Service Pack 2 and prior - Microsoft Windows Vista Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3897 BugTraq ID: 25908 http://www.securityfocus.com/bid/25908 Bugtraq: 20071010 Re: iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow (Google Search) http://www.securityfocus.com/archive/1/481983/100/100/threaded Cert/CC Advisory: TA07-282A http://www.us-cert.gov/cas/techalerts/TA07-282A.html HPdes Security Advisory: HPSBST02280 http://www.securityfocus.com/archive/1/482366/100/0/threaded HPdes Security Advisory: SSRT071480 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=607 Microsoft Security Bulletin: MS07-056 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-056 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1706 http://securitytracker.com/id?1018785 http://securitytracker.com/id?1018786 http://secunia.com/advisories/27112 http://www.vupen.com/english/advisories/2007/3436
Copyright	Copyright (C) 2011 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.