Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.902492
Categoría:Windows : Microsoft Bulletins
Título:Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2639142)
Resumen:This host is missing an important security update according to; Microsoft Bulletin MS11-094.
Descripción:Summary:
This host is missing an important security update according to
Microsoft Bulletin MS11-094.

Vulnerability Insight:
The flaws are due to the application loading unspecified libraries in
an insecure manner. This can be exploited to load an arbitrary library by
tricking a user into opening a PowerPoint file located on a remote WebDAV or SMB share.

Vulnerability Impact:
Successful exploitation could allow attackers to execute arbitrary code by
tricking a user into opening a malicious PPT file.

Affected Software/OS:
- Microsoft PowerPoint 2010

- Microsoft PowerPoint 2007 Service Pack 2

- Microsoft PowerPoint Viewer 2007 Service Pack 2

- Microsoft Office Compatibility Pack for PowerPoint 2007 File Formats SP2

Solution:
The vendor has released updates. Please see the references for more information.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2011-3396
Cert/CC Advisory: TA11-347A
http://www.us-cert.gov/cas/techalerts/TA11-347A.html
Microsoft Security Bulletin: MS11-094
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-094
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14665
Common Vulnerability Exposure (CVE) ID: CVE-2011-3413
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14581
CopyrightCopyright (C) 2011 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.