PT-2007-1522 · Microsoft · Windows 2003+2

Fabrice Desclaux + 1 · Publicado 2007-02-13 · Atualizado 2018-10-12 · CVE-2007-0026

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2000 SP4, XP SP2, and 2003 SP1

Description The issue allows remote attackers to execute arbitrary code via an RTF file with a malformed OLE object, triggering memory corruption.

Recommendations For Microsoft Windows 2000 SP4, consider applying a patch to fix the OLE Dialog component issue. For Microsoft Windows XP SP2, consider applying a patch to fix the OLE Dialog component issue. For Microsoft Windows 2003 SP1, consider applying a patch to fix the OLE Dialog component issue.

Correção

Identificadores relacionados

CVE-2007-0026

Produtos afetados

Windows 2000

Windows 2003

Windows Xp

Referências · 10

• http://secunia.com/advisories/24147 · Nota
• http://us-cert.gov/cas/techalerts/TA07-044A.html · Nota
• http://securityfocus.com/bid/22483 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-011 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-0026 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A540 · Nota
• http://vupen.com/english/advisories/2007/0580 · Nota
• http://securitytracker.com/id?1017637 · Nota
• http://osvdb.org/31885 · Nota
• http://kb.cert.org/vuls/id/497756 · Nota