Test Kennung:	1.3.6.1.4.1.25623.1.0.801719
Kategorie:	Windows : Microsoft Bulletins
Titel:	Microsoft Windows CSRSS CSRFinalizeContext Local Privilege Escalation Vulnerability (930178)
Zusammenfassung:	This host is missing a critical security update according to; Microsoft Bulletin MS07-021.
Beschreibung:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS07-021. Vulnerability Insight: The flaw is due to - A double-free error in the Client/Server Run-time Subsystem (CSRSS) within 'WINSRV.DLL' when handling HardError messages. - Incorrect marshaling of system resources in the Client/Server Run-time Subsystem (CSRSS) when handling connections during the startup and stopping of processes. Vulnerability Impact: Successful exploitation allows remote attackers to execute arbitrary code with SYSTEM privileges by establishing and closing multiple connections to the subsystem's ApiPort. Affected Software/OS: - Microsoft Windows XP Service Pack 2 and prior - Microsoft Windows 2000 Service Pack 4 and prior - Microsoft Windows 2K3 Service Pack 2 and prior - Microsoft Windows Vista Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2006-6696 BugTraq ID: 21688 http://www.securityfocus.com/bid/21688 BugTraq ID: 23324 http://www.securityfocus.com/bid/23324 Bugtraq: 20061221 Microsoft Windows XP/2003/Vista memory corruption 0day (Google Search) http://www.securityfocus.com/archive/1/455061/100/0/threaded Bugtraq: 20061221 Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day (Google Search) http://www.securityfocus.com/archive/1/455104/100/0/threaded Bugtraq: 20061221 Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memorycorruption 0day (Google Search) http://www.securityfocus.com/archive/1/455088/100/0/threaded Bugtraq: 20061222 Re: Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day (Google Search) http://www.securityfocus.com/archive/1/455158/100/0/threaded Bugtraq: 20061230 csrss.exe double-free vulnerability - arbitrary DWORD overwrite exploit (Google Search) http://www.securityfocus.com/archive/1/455546/100/0/threaded http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051394.html HPdes Security Advisory: HPSBST02208 http://www.securityfocus.com/archive/1/466331/100/200/threaded HPdes Security Advisory: SSRT071365 http://groups.google.ca/group/microsoft.public.win32.programmer.kernel/browse_thread/thread/c5946bf40f227058/7bd7b5d66a4e5aff http://isc.sans.org/diary.php?n&storyid=1965 http://research.eeye.com/html/alerts/zeroday/20061215.html http://www.determina.com/security.research/vulnerabilities/csrss-harderror.html http://www.kuban.ru/forum_new/forum2/files/19124.html http://www.security.nnov.ru/Gnews944.html http://www.security.nnov.ru/files/messagebox.c Microsoft Security Bulletin: MS07-021 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-021 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1816 http://securitytracker.com/id?1017433 http://secunia.com/advisories/23448 http://www.vupen.com/english/advisories/2006/5120 http://www.vupen.com/english/advisories/2007/1325 Common Vulnerability Exposure (CVE) ID: CVE-2007-1209 BugTraq ID: 23338 http://www.securityfocus.com/bid/23338 Bugtraq: 20070410 EEYE: Windows Vista CSRSS Dangling Process Pointer Privilege Escalation (Google Search) http://www.securityfocus.com/archive/1/465233/100/0/threaded Cert/CC Advisory: TA07-100A http://www.us-cert.gov/cas/techalerts/TA07-100A.html CERT/CC vulnerability note: VU#219848 http://www.kb.cert.org/vuls/id/219848 http://research.eeye.com/html/advisories/published/AD20070410b.html http://www.osvdb.org/34008 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1524 http://www.securitytracker.com/id?1017897 http://secunia.com/advisories/24823 http://securityreason.com/securityalert/2531
Copyright	Copyright (C) 2011 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.