Vulnerability Bulletins |
Ejecución de código arbitrario en Windows Media Format Runtime |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | Microsoft |
| Affected software |
Windows Media Format Runtime 7.1 Windows Media Format Runtime 9 Windows Media Format Runtime 9.5 Windows Media Format Runtime 9.5 x64 Edition Windows Media Format Runtime 11 Windows Media Services 9.1 |
Description |
|
|
Se ha encontrado una vulnerabilidad en Windows Media Format Runtime. La vulnerabilidad reside en la forma en que manipula archivos Advanced Systems Format. Un atacante remoto podría ejecutar código arbitrario mediante un contenido Windows Media Format Runtime especialmente diseñado. |
|
Solution |
|
|
Actualización de software Microsoft Windows Media Format Runtime 7.1 and 9 / Windows 2000 Service Pack 4 / patch Windows2000-KB941569-NEC98-JPN.exe Windows Media Format Runtime 7.1 and 9 / Windows 2000 Service Pack 4 / patch Windows2000-KB941569-x86-ENU.exe Windows Media Format Runtime 9, 9.5 and 11 / Windows XP Service Pack 2 / patch WindowsXP-KB941569-x86-ENU.exe Windows Media Format Runtime 9.5 / Windows XP x64-based Edition / patch WindowsServer2003.WindowsXP-KB941569-x64-ENU.exe Windows Media Format Runtime 9.5 x64 Edition / Windows XP x64-based Edition / patch WindowsMedia10-KB941569-x64-ENU.exe Windows Media Format Runtime 11 / Windows XP x64-based Edition / patch WindowsMedia11-KB941569-x64-ENU.exe Windows Media Format Runtime 9.5 / Windows Server 2003 / patch WindowsServer2003-KB941569-x86-ENU.exe Windows Media Format Runtime 9.5 / Windows Server 2003 / patch WindowsServer2003.WindowsXP-KB941569-x64-ENU.exe Windows Media Format Runtime 9.5 x64 Edition / Windows Server 2003 x64-based Edition / patch WindowsMedia10-KB941569-x64-ENU.exe Windows Media Services 9.1 / Windows Server 2003 / patch WindowsServer2003-KB944275-x86-ENU.exe Windows Media Services 9.1 x64 Edition / Windows Server 2003 / patch WindowsServer2003.WindowsXP-KB944275-x64-ENU.exe Windows Vista / patch Windows6.0-KB941569-x86.exe Windows Vista x64 Edition / patch Windows6.0-KB941569-x64.exe |
|
Standar resources |
|
| Property | Value |
| CVE | CVE-2007-0064 |
| BID | |
Other resources |
|
|
Microsoft Security Bulletin MS07-068 http://www.microsoft.com/technet/security/Bulletin/MS07-068.mspx |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2007-12-12 |