PT-2007-3558 · Microsoft · Windows+1

Publicado 2007-06-12 · Atualizado 2018-10-16 · CVE-2007-2219

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description The issue allows remote attackers to execute arbitrary code via certain parameters to an unspecified function in the Win32 API. A remote code execution vulnerability exists in the way that the Win32 API validates parameters. An attacker could exploit the vulnerability by constructing a specially crafted Web page that could potentially allow remote code execution if a user viewed the Web page. This could allow an attacker to take complete control of an affected system.

Recommendations For Microsoft Windows 2000, XP SP2, and Server 2003 SP1 and SP2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-2219

Produtos afetados

Windows

Win32 Api

Referências · 13

• http://secunia.com/advisories/25640 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-035 · Nota
• http://securityfocus.com/archive/1/471947/100/0/threaded · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1643 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-035 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA07-163A.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2219 · Nota de Segurança
• http://osvdb.org/35341 · Nota
• http://securitytracker.com/id?1018230 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2219 · Nota de Segurança
• http://kb.cert.org/vuls/id/457281 · Nota
• http://vupen.com/english/advisories/2007/2155 · Nota
• http://securityfocus.com/bid/24370 · Nota