Vulnerability Bulletins |
Ejecución de comandos arbitrarios en Indexing Service de Microsoft Windows |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | Microsoft |
| Affected software |
Microsoft Windows 2000 SP4 Microsoft Windows XP Microsoft Windows Server 2003 |
Description |
|
|
Se ha descubierto una vulnerabilidad en el control ActiveX en el servicio Indexing Service en Microsoft Windows. Un atacante remoto podría ejecutar comandos arbitrarios mediante métodos no especificados. Este boletín sustituye al MS06-053. |
|
Solution |
|
|
Actualización de software Microsoft (MS09-057) Windows 2000 / patch Windows2000-KB969059-x86-ENU Windows XP / patch WindowsXP-KB969059-x86-ENU Windows XP x64 / patch WindowsServer2003.WindowsXP-KB969059-x64-enu Windows Server 2003 / patch Windowsserver2003-KB969059-x86-enu Windows Server 2003 x64 / patch Windowsserver2003.WindowsXP-KB969059-x64-enu Windows Server 2003 Itanium / patch Windowsserver2003-KB969059-ia64-enu http://www.microsoft.com/downloads |
|
Standar resources |
|
| Property | Value |
| CVE | CVE-2009-2507 |
| BID | |
Other resources |
|
|
Microsoft Security Bulletin (MS09-057) http://www.microsoft.com/technet/security/bulletin/ms09-057.mspx |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2009-10-23 |