ID de Prueba:	1.3.6.1.4.1.25623.1.0.902192
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft Office COM Validation Remote Code Execution Vulnerability (983235)
Resumen:	This host is missing a critical security update according to; Microsoft Bulletin MS10-036.
Descripción:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS10-036. Vulnerability Insight: The flaw is caused by an error when validating COM (Component Object Model) object instantiation, which could allow attackers to execute arbitrary code by tricking a user into opening a specially crafted Excel, PowerPoint, Publisher, Visio, or Word file. Vulnerability Impact: Successful exploitation could allow an attacker to execute arbitrary code on the remote system. Affected Software/OS: - Microsoft Office 2003 SP3 - Microsoft Office Word 2007 SP2 and prior - Microsoft Office Word 2003 SP3 and prior - Microsoft Office Excel 2003 SP3 and prior - Microsoft Office Excel 2007 SP2 and prior - Microsoft Office Visio 2007 SP2 and prior - Microsoft Office Visio 2003 SP3 and prior - Microsoft Office System SP2 and prior - Microsoft Office Publisher 2003 SP3 and prior - Microsoft Office Publisher 2003 SP3 and prior - Microsoft Office PowerPoint 2003 SP3 and prior - Microsoft Office PowerPoint 2007 SP2 and prior Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1263 BugTraq ID: 40574 http://www.securityfocus.com/bid/40574 Cert/CC Advisory: TA10-159B http://www.us-cert.gov/cas/techalerts/TA10-159B.html Cert/CC Advisory: TA10-285A http://www.us-cert.gov/cas/techalerts/TA10-285A.html Microsoft Security Bulletin: MS10-036 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-036 Microsoft Security Bulletin: MS10-083 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-083 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7286 http://www.securitytracker.com/id?1024555
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.