Test Kennung:	1.3.6.1.4.1.25623.1.0.900328
Kategorie:	Windows : Microsoft Bulletins
Titel:	Microsoft Internet Explorer Remote Code Execution Vulnerability (963027)
Zusammenfassung:	This host is missing a critical security update according to; Microsoft Bulletin MS09-014.
Beschreibung:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS09-014. Vulnerability Insight: Flaws are due to - Blended threat issue which allows executables to be downloaded in user's computer without prompting. - Vulnerability in NT LAN Manager which allows the attacker to replay NTLM credentials. - Arbitrary code execution in Internet Explorer at run time of Internet Explorer Browser. - Internet Explorer Uninitialized Memory Variant which lets the attacker cause remote code execution. Vulnerability Impact: Successful exploitation will let the attacker execute arbitrary codes into the context of the affected system and can cause denial of service in the affected system. Affected Software/OS: Microsoft Internet Explorer version 5.x/6.x/7.x. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2540 http://lists.apple.com/archives/security-announce/2008//Jun/msg00001.html BugTraq ID: 29445 http://www.securityfocus.com/bid/29445 Cert/CC Advisory: TA09-104A http://www.us-cert.gov/cas/techalerts/TA09-104A.html http://aviv.raffon.net/2008/05/31/SafariPwnsInternetExplorer.aspx http://blogs.zdnet.com/security/?p=1230 http://www.dhanjani.com/archives/2008/05/safari_carpet_bomb.html http://www.microsoft.com/technet/security/advisory/953818.mspx Microsoft Security Bulletin: MS09-014 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014 Microsoft Security Bulletin: MS09-015 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-015 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5782 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6108 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8509 http://securitytracker.com/id?1020150 http://www.securitytracker.com/id?1022047 http://secunia.com/advisories/30467 http://www.vupen.com/english/advisories/2008/1706 http://www.vupen.com/english/advisories/2009/1028 http://www.vupen.com/english/advisories/2009/1029 XForce ISS Database: apple-safari-windows-code-execution(42765) https://exchange.xforce.ibmcloud.com/vulnerabilities/42765 Common Vulnerability Exposure (CVE) ID: CVE-2009-0550 BugTraq ID: 34439 http://www.securityfocus.com/bid/34439 http://blogs.technet.com/srd/archive/2009/04/14/ntlm-credential-reflection-updates-for-http-clients.aspx Microsoft Security Bulletin: MS09-013 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-013 http://osvdb.org/53619 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5320 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6233 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7569 http://www.securitytracker.com/id?1022041 http://secunia.com/advisories/34677 http://secunia.com/advisories/34678 http://www.vupen.com/english/advisories/2009/1027 Common Vulnerability Exposure (CVE) ID: CVE-2009-0551 http://osvdb.org/53624 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6164 http://www.securitytracker.com/id?1022042 Common Vulnerability Exposure (CVE) ID: CVE-2009-0552 http://osvdb.org/53625 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5551 Common Vulnerability Exposure (CVE) ID: CVE-2009-0553 BugTraq ID: 34424 http://www.securityfocus.com/bid/34424 http://skypher.com/index.php/2009/04/19/ms09-014-embed-element-memory-corruption/ http://osvdb.org/53626 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6069 Common Vulnerability Exposure (CVE) ID: CVE-2009-0554 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5723
Copyright	Copyright (C) 2009 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.