ID de Prueba:	1.3.6.1.4.1.25623.1.0.902926
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft Office Word Remote Code Execution Vulnerabilities (2742319)
Resumen:	This host is missing a critical security update according to; Microsoft Bulletin MS12-064.
Descripción:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS12-064. Vulnerability Insight: - An error when parsing the PAPX section can be exploited to corrupt memory via a specially crafted Word file. NOTE: This vulnerability affects Microsoft Word 2007 only. - A use-after-free error exists when handling listid and can be exploited via a specially crafted RTF file. Vulnerability Impact: Successful exploitation could allow attackers to execute arbitrary code by tricking a user into opening a specially crafted word and RTF files. Affected Software/OS: - Microsoft Word Viewer - Microsoft Office 2003 Service Pack 3 - Microsoft Office 2007 Service Pack 2 - Microsoft Office 2007 Service Pack 3 - Microsoft Office 2010 Service Pack 1 - Microsoft Office Web Apps 2010 Service Pack 1 - Microsoft SharePoint Server 2010 Service Pack 1 - Microsoft Office Compatibility Pack Service Pack 2 - Microsoft Office Compatibility Pack Service Pack 3 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0182 BugTraq ID: 55780 http://www.securityfocus.com/bid/55780 Cert/CC Advisory: TA12-283A http://www.us-cert.gov/cas/techalerts/TA12-283A.html Microsoft Security Bulletin: MS12-064 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-064 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15426 Common Vulnerability Exposure (CVE) ID: CVE-2012-2528 BugTraq ID: 55781 http://www.securityfocus.com/bid/55781 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15680
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.