PT-2003-1944 · Microsoft · Comctl32.Dll+1

Brett Moore + 1 · Publicado 2003-10-25 · Atualizado 2017-07-11 · CVE-2003-0897

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows XP

Description The issue allows local users to execute arbitrary code by sending specific button control messages to privileged applications. This can be achieved by sending (1) BCM GETTEXTMARGIN or (2) BCM SETTEXTMARGIN button control messages.

Recommendations For Windows XP, consider restricting access to privileged applications until a fix is available. As a temporary workaround, avoid using the BCM GETTEXTMARGIN and BCM SETTEXTMARGIN button control messages in applications that use the CommCtl32.dll library.

Correção

Identificadores relacionados

CVE-2003-0897

Produtos afetados

Comctl32.Dll

Windows Xp

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2003-0897 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13558 · Nota
• http://marc.info/?l=bugtraq&m=106692772510010&w=2 · Nota