PT-2007-3556 · Microsoft+1 · Windows 2000+4

Publicado 2007-10-09 · Atualizado 2018-10-16 · CVE-2007-2217

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Kodak Image Viewer in Microsoft Windows versions 2000 SP4, XP SP2, Server 2003 SP1, and Server 2003 SP2

Description A remote code execution issue exists in the way the Kodak Image Viewer handles specially crafted image files, potentially allowing an attacker to execute arbitrary code via crafted image files that trigger memory corruption. This could be exploited if a user visits a Web site, views a specially crafted e-mail message, or opens an e-mail attachment, potentially allowing an attacker to take complete control of an affected system.

Recommendations For Windows 2000 SP4, update the Kodak Image Viewer to a version that is not affected by this issue. For Windows XP SP2, consider disabling the Kodak Image Viewer until a patch is available. For Windows Server 2003 SP1 and SP2, restrict access to the Kodak Image Viewer to minimize the risk of exploitation.

Exploit

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2007-2217

Produtos afetados

Kodak Image Viewer

Windows

Windows 2000

Windows Server 2003

Windows Xp

Referências · 15

• 🔥 https://exploit-db.com/exploits/4584 · Exploit
• 🔥 https://exploit-db.com/exploits/4616 · Exploit
• 🔥 http://securityfocus.com/bid/25909 · Exploit
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1481 · Nota
• http://securityfocus.com/archive/1/482366/100/0/threaded · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA07-282A.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2217 · Nota de Segurança
• http://secunia.com/advisories/27092 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/180345 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-055 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36799 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-055 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/3435 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-2217 · Nota de Segurança
• http://securitytracker.com/id?1018784 · Nota