PT-2007-2518 · Microsoft · Windows Explorer+2

Publicado 2007-02-26 · Atualizado 2018-10-16 · CVE-2007-1090

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Explorer on Windows XP and 2003

Description The issue allows remote user-assisted attackers to cause a denial of service, resulting in a crash, via a malformed WMF file. This crash is triggered when the user browses the folder containing the malicious file.

Recommendations For Windows XP and 2003, avoid browsing folders that may contain malformed WMF files until a fix is available. As a temporary workaround, consider restricting access to potentially malicious files to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-1090

Produtos afetados

Windows Explorer

Windows 2003

Windows Xp

Referências · 7

• 🔥 https://exploit-db.com/exploits/29659 · Exploit
• http://securityfocus.com/archive/1/461373/100/0/threaded · Nota
• http://osvdb.org/34490 · Nota
• http://securityfocus.com/bid/22715 · Nota
• http://securityvulns.com/news/Microsoft/Windows/Explorer/DoS.html · Nota
• http://securityvulns.com/Qdocument170.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1090 · Nota de Segurança