ID de Prueba:	1.3.6.1.4.1.25623.1.0.801715
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft XML Core Services Remote Code Execution Vulnerability (936227)
Resumen:	This host is missing a critical security update according to; Microsoft Bulletin MS07-042.
Descripción:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS07-042. Vulnerability Insight: The flaw is due to an integer overflow error in the 'substringData()' method of an XMLDOM/TextNode JavaScript object. Vulnerability Impact: Successful exploitation will allow the attacker to execute arbitrary code in the context of the user running the application. Affected Software/OS: - Microsoft XML Core Services 3.0/4.0/5.0/6.0 - Microsoft Windows 2K Service Pack 4 and prior - Microsoft Windows XP Service Pack 3 and prior - Microsoft Windows 2003 Service Pack 2 and prior - Microsoft Windows Vista - Microsoft Office 2003 Service Pack 2 - Microsoft Office 2007 - Microsoft Office Compatibility Pack for Word/Excel/PowerPoint 2007 File Formats Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2223 BugTraq ID: 25301 http://www.securityfocus.com/bid/25301 Bugtraq: 20070814 ZDI-07-048: Microsoft Internet Explorer substringData() Heap Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/476527/100/0/threaded Bugtraq: 20070816 MS07-042 XMLDOM substringData() PoC (Google Search) http://www.securityfocus.com/archive/1/476747/100/0/threaded CERT/CC vulnerability note: VU#361968 http://www.kb.cert.org/vuls/id/361968 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=576 http://www.zerodayinitiative.com/advisories/ZDI-07-048/ Microsoft Security Bulletin: MS07-042 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-042 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2069 http://www.securitytracker.com/id?1018559 http://secunia.com/advisories/26447 http://www.vupen.com/english/advisories/2007/2866
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.