![]() |
Inicial ▼ Bookkeeping
Online ▼ Auditorias ▼
DNS
Administrado ▼
Acerca de DNS
Ordenar/Renovar
Preguntas Frecuentes
AUP
Dynamic DNS Clients
Configurar Dominios Dynamic DNS Update Password Monitoreo
de Redes ▼
Enterprise
Avanzado
Estándarr
Prueba
Preguntas Frecuentes
Resumen de Precio/Funciones
Ordenar
Muestras
Configure/Status Alert Profiles | ||
ID de Prueba: | 1.3.6.1.4.1.25623.1.0.902430 |
Categoría: | Windows : Microsoft Bulletins |
Título: | Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2545814) |
Resumen: | This host is missing a critical security update according to; Microsoft Bulletin MS11-036. |
Descripción: | Summary: This host is missing a critical security update according to Microsoft Bulletin MS11-036. Vulnerability Insight: The flaws are due to a memory corruption and buffer overflow error when parsing a malformed PowerPoint file, which could be exploited to execute arbitrary code via a malicious document. Vulnerability Impact: Successful exploitation could allow attackers to execute arbitrary code by tricking a user into opening a malicious PPT file. Affected Software/OS: - Microsoft PowerPoint 2007 Converter - Microsoft PowerPoint 2002 Service Pack 3 - Microsoft PowerPoint 2003 Service Pack 3 - Microsoft PowerPoint 2007 Service Pack 2 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C |
Referencia Cruzada: |
Common Vulnerability Exposure (CVE) ID: CVE-2011-1269 Microsoft Security Bulletin: MS11-036 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-036 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12438 Common Vulnerability Exposure (CVE) ID: CVE-2011-1270 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12256 |
Copyright | Copyright (C) 2011 Greenbone AG |
Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora. |