PT-2005-1598 · Microsoft · Office+2

Denis Jedig · Publicado 2005-02-25 · Atualizado 2019-04-30 · CVE-2005-0545

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP Pro version SP2 Microsoft Windows 2000 Server version SP4

Description The issue allows local users to bypass group policies that restrict access to hidden drives. This can be achieved by using the browse feature in Office 10 applications, such as Word or Excel, or by using a flash drive.

Recommendations For Microsoft Windows XP Pro SP2, consider restricting access to Office 10 applications or disabling the browse feature as a temporary workaround. For Microsoft Windows 2000 Server SP4, consider restricting access to Office 10 applications or disabling the browse feature as a temporary workaround. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-0545

Produtos afetados

Office

Windows 2000 Server

Windows Xp Pro

Referências · 4

• http://securityfocus.com/bid/12641 · Nota
• http://securityfocus.com/archive/1/391332 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=110935549821930&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0545 · Nota de Segurança