Test Kennung:	1.3.6.1.4.1.25623.1.0.801715
Kategorie:	Windows : Microsoft Bulletins
Titel:	Microsoft XML Core Services Remote Code Execution Vulnerability (936227)
Zusammenfassung:	This host is missing a critical security update according to; Microsoft Bulletin MS07-042.
Beschreibung:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS07-042. Vulnerability Insight: The flaw is due to an integer overflow error in the 'substringData()' method of an XMLDOM/TextNode JavaScript object. Vulnerability Impact: Successful exploitation will allow the attacker to execute arbitrary code in the context of the user running the application. Affected Software/OS: - Microsoft XML Core Services 3.0/4.0/5.0/6.0 - Microsoft Windows 2K Service Pack 4 and prior - Microsoft Windows XP Service Pack 3 and prior - Microsoft Windows 2003 Service Pack 2 and prior - Microsoft Windows Vista - Microsoft Office 2003 Service Pack 2 - Microsoft Office 2007 - Microsoft Office Compatibility Pack for Word/Excel/PowerPoint 2007 File Formats Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2223 BugTraq ID: 25301 http://www.securityfocus.com/bid/25301 Bugtraq: 20070814 ZDI-07-048: Microsoft Internet Explorer substringData() Heap Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/476527/100/0/threaded Bugtraq: 20070816 MS07-042 XMLDOM substringData() PoC (Google Search) http://www.securityfocus.com/archive/1/476747/100/0/threaded CERT/CC vulnerability note: VU#361968 http://www.kb.cert.org/vuls/id/361968 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=576 http://www.zerodayinitiative.com/advisories/ZDI-07-048/ Microsoft Security Bulletin: MS07-042 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-042 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2069 http://www.securitytracker.com/id?1018559 http://secunia.com/advisories/26447 http://www.vupen.com/english/advisories/2007/2866
Copyright	Copyright (C) 2011 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.