PT-2002-2204 · Microsoft · Windows 2000+3

Publicado 2002-11-04 · Atualizado 2019-04-30 · CVE-2002-1230

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Windows NT 4.0 Windows 4.0 Terminal Server Edition Windows 2000 Windows XP

Description: The issue allows local users to execute arbitrary code as LocalSystem via a "shatter" style attack. This is achieved by sending a WM COPYDATA message followed by a WM TIMER message.

Recommendations: For Windows NT 4.0, apply the necessary patch to fix the flaw in Windows WM TIMER message handling. For Windows 4.0 Terminal Server Edition, apply the necessary patch to fix the flaw in Windows WM TIMER message handling. For Windows 2000, apply the necessary patch to fix the flaw in Windows WM TIMER message handling. For Windows XP, apply the necessary patch to fix the flaw in Windows WM TIMER message handling.

Exploit

Correção

Identificadores relacionados

CVE-2002-1230

Produtos afetados

Windows 2000

Windows Nt 4.0 Terminal Server Edition

Windows Nt 4.0

Windows Xp

Referências · 18

• 🔥 https://exploit-db.com/exploits/21685 · Exploit
• 🔥 https://exploit-db.com/exploits/21689 · Exploit
• 🔥 https://exploit-db.com/exploits/21922 · Exploit
• 🔥 https://exploit-db.com/exploits/21691 · Exploit
• 🔥 https://exploit-db.com/exploits/21923 · Exploit
• 🔥 https://exploit-db.com/exploits/21688 · Exploit
• 🔥 https://exploit-db.com/exploits/21686 · Exploit
• 🔥 https://exploit-db.com/exploits/21690 · Exploit
• 🔥 https://exploit-db.com/exploits/21687 · Exploit
• 🔥 https://exploit-db.com/exploits/21684 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-071 · Aviso do Fabricante
• http://packetstormsecurity.nl/filedesc/GetAd.c.html · Aviso do Fabricante
• http://securityfocus.com/bid/5927 · Nota
• http://iss.net/security_center/static/10343.php · Aviso do Fabricante
• http://ciac.org/ciac/bulletins/n-027.shtml · Nota