ID de Prueba:	1.3.6.1.4.1.25623.1.0.900365
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft Office Word Remote Code Execution Vulnerabilities (969514)
Resumen:	This host is missing a critical security update according to; Microsoft Bulletin MS09-027.
Descripción:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS09-027. Vulnerability Insight: The flaws are due to boundary errors when parsing certain records that can be exploited to cause a buffer overflow. Vulnerability Impact: Successful exploitation could execute arbitrary code on the remote system via a specially crafted Word document. Affected Software/OS: - Microsoft Word Viewer 2003 - Microsoft Office 2K/XP/2003/2007 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0563 BugTraq ID: 35188 http://www.securityfocus.com/bid/35188 Bugtraq: 20090610 ZDI-09-035: Microsoft Word Document Stack Based Buffer Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/504204/100/0/threaded Cert/CC Advisory: TA09-160A http://www.us-cert.gov/cas/techalerts/TA09-160A.html http://www.zerodayinitiative.com/advisories/ZDI-09-035 Microsoft Security Bulletin: MS09-027 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-027 http://osvdb.org/54959 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6133 http://www.securitytracker.com/id?1022356 http://www.vupen.com/english/advisories/2009/1546 Common Vulnerability Exposure (CVE) ID: CVE-2009-0565 BugTraq ID: 35190 http://www.securityfocus.com/bid/35190 http://osvdb.org/54960 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6334 http://securityreason.com/securityalert/8206
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.