PT-2011-2038 · Microsoft · Windows Vista+5

Chaouki Bekrar + 1 · Publicado 2011-04-13 · Atualizado 2023-12-07 · CVE-2011-0041

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through SP2 Microsoft Office version XP SP3

Description The issue is related to an integer overflow in gdiplus.dll, which is part of GDI+ in Microsoft Windows and Office. This allows remote attackers to execute arbitrary code via a crafted EMF image. The vulnerability could be exploited if a user opens a specially crafted EMF image file, potentially allowing an attacker to take complete control of an affected system. This could enable the attacker to install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights on the system might be less impacted than those operating with administrative user rights.

Recommendations For Microsoft Windows XP versions SP2 through SP3, apply the recommended patch to fix the integer overflow vulnerability in gdiplus.dll. For Microsoft Windows Server 2003 version SP2, apply the recommended patch to fix the integer overflow vulnerability in gdiplus.dll. For Microsoft Windows Vista versions SP1 through SP2, apply the recommended patch to fix the integer overflow vulnerability in gdiplus.dll. For Microsoft Windows Server 2008 versions Gold through SP2, apply the recommended patch to fix the integer overflow vulnerability in gdiplus.dll. For Microsoft Office version XP SP3, apply the recommended patch to fix the integer overflow vulnerability in gdiplus.dll.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2011-0041

Produtos afetados

Office

Windows

Windows Server 2003

Windows Server 2008

Windows Vista

Windows Xp

Referências · 7

• 🔥 https://exploit-db.com/exploits/17544 · Exploit
• http://us-cert.gov/cas/techalerts/TA11-102A.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11854 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-029 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0041 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2011-0041 · Nota de Segurança
• https://docs.microsoft.com/security-updates/securitybulletins/2011/MS11-029 · Nota