ID de Prueba:	1.3.6.1.4.1.25623.1.0.804451
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft Office Security Feature Bypass Vulnerability (2961033)
Resumen:	This host is missing an important security; update according to Microsoft Bulletin MS14-024.
Descripción:	Summary: This host is missing an important security update according to Microsoft Bulletin MS14-024. Vulnerability Insight: A security feature bypass flaw exists because the MSCOMCTL common controls library used by Microsoft Office software does not properly implement Address Space Layout Randomization (ASLR). Vulnerability Impact: Successful exploitation will allow remote attackers to bypass the ASLR security feature, which helps protect users from a broad class of vulnerabilities. Affected Software/OS: - Microsoft Office 2007 Service Pack 3 - Microsoft Office 2010 Service Pack 2 and prior - Microsoft Office 2013 Service Pack 1 and prior Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1809 Microsoft Security Bulletin: MS14-024 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-024
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.