Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.900365
Kategorie:Windows : Microsoft Bulletins
Titel:Microsoft Office Word Remote Code Execution Vulnerabilities (969514)
Zusammenfassung:This host is missing a critical security update according to; Microsoft Bulletin MS09-027.
Beschreibung:Summary:
This host is missing a critical security update according to
Microsoft Bulletin MS09-027.

Vulnerability Insight:
The flaws are due to boundary errors when parsing certain records that can be
exploited to cause a buffer overflow.

Vulnerability Impact:
Successful exploitation could execute arbitrary code on the remote system
via a specially crafted Word document.

Affected Software/OS:
- Microsoft Word Viewer 2003

- Microsoft Office 2K/XP/2003/2007

Solution:
The vendor has released updates. Please see the references for more information.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2009-0563
BugTraq ID: 35188
http://www.securityfocus.com/bid/35188
Bugtraq: 20090610 ZDI-09-035: Microsoft Word Document Stack Based Buffer Overflow Vulnerability (Google Search)
http://www.securityfocus.com/archive/1/504204/100/0/threaded
Cert/CC Advisory: TA09-160A
http://www.us-cert.gov/cas/techalerts/TA09-160A.html
http://www.zerodayinitiative.com/advisories/ZDI-09-035
Microsoft Security Bulletin: MS09-027
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-027
http://osvdb.org/54959
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6133
http://www.securitytracker.com/id?1022356
http://www.vupen.com/english/advisories/2009/1546
Common Vulnerability Exposure (CVE) ID: CVE-2009-0565
BugTraq ID: 35190
http://www.securityfocus.com/bid/35190
http://osvdb.org/54960
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6334
http://securityreason.com/securityalert/8206
CopyrightCopyright (C) 2009 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.