ID de Prueba:	1.3.6.1.4.1.25623.1.0.902262
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft Windows Shell and WordPad COM Validation Vulnerability (2405882)
Resumen:	This host is missing a critical security update according to; Microsoft Bulletin MS10-083.
Descripción:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS10-083. Vulnerability Insight: The flaw is caused by an error in the way Windows Shell and WordPad validate COM object instantiation, which could allow attackers to execute arbitrary code. Vulnerability Impact: Successful exploitation will allow remote attacker to arbitrary code by convincing a user to open a specially crafted WordPad file, or open or select a shortcut file that is present on a network or a WebDAV share. Affected Software/OS: - Microsoft Windows 7 - Microsoft Windows XP Service Pack 3 and prior - Microsoft Windows Vista Service Pack 2 and prior - Microsoft Windows Server 2003 Service Pack 2 and prior - Microsoft Windows Server 2008 Service Pack 2 and prior Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1263 BugTraq ID: 40574 http://www.securityfocus.com/bid/40574 Cert/CC Advisory: TA10-159B http://www.us-cert.gov/cas/techalerts/TA10-159B.html Cert/CC Advisory: TA10-285A http://www.us-cert.gov/cas/techalerts/TA10-285A.html Microsoft Security Bulletin: MS10-036 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-036 Microsoft Security Bulletin: MS10-083 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-083 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7286 http://www.securitytracker.com/id?1024555
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.