int(5321)

Vulnerability Bulletins


Vulnerabilidad en Microsoft Internet Explorer 8 Developer Tools

Vulnerability classification

Property Value
Confidence level Oficial
Impact Obtener acceso
Dificulty Experto
Required attacker level Acceso remoto sin cuenta a un servicio estandar

System information

Property Value
Affected manufacturer Microsoft
Affected software Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008

Description

Se ha encontrado una vulnerabilidad en Microsoft Internet Explorer 8 Developer Tools.

Un atacante remoto podría ejecutar código arbitrario mediante la construcción de una página web especialmente manipulada.

Solution



Actualización de software

Microsoft (MS10-034)
Microsoft Windows 2000 SP4 / patch Windows2000-KB980195-x86-ENU
Windows XP SP2 y SP3 / patch WindowsXP-KB980195-x86-ENU
Windows XP SP2 x64 / patch WindowsServer2003.WindowsXP-KB980195-x64-ENU
Windows Server 2003 SP2 / patch WindowsServer2003-KB980195-x86-ENU
Windows Server 2003 SP2 x64 / patch WindowsServer2003.WindowsXP-KB980195-x64-ENU
Windows Server 2003 SP2 Itanium / patch WindowsServer2003-KB980195-ia64-ENU
Windows Vista SP1 y SP2 / patch Windows6.0-KB980195-x86
Windows Vista SP1 y SP2 x64 / patch Windows6.0-KB980195-x64
Windows Server 2008 SP2 / patch Windows6.0-KB980195-x86
Windows Server 2008 x64 SP2 / patch Windows6.0-KB980195-x64
Windows Server 2008 SP2 Itanium / patch Windows6.0-KB980195-ia64
Windows 7 for 32-bit Systems / patch Windows6.1-KB980195-x64
Windows 7 for x64-based Systems / patch Windows6.1-KB980195-x86
Windows Server 2008 R2 for x64-based Systems / patch Windows6.1-KB980195-x64.
Windows Server 2008 R2 for Itanium-based Systems / patch Windows6.1-KB980195-ia64
http://www.microsoft.com/downloads

Microsoft (MS11-027)
Ver tabla de actualizaciones en:
http://www.microsoft.com/technet/security/Bulletin/MS11-027.mspx

Standar resources

Property Value
CVE CVE-2010-0811
BID

Other resources

Microsoft Security Bulletin (MS10-034)
http://www.microsoft.com/technet/security/bulletin/ms10-034.mspx

Microsoft Security Bulletin (MS11-027)
http://www.microsoft.com/technet/security/Bulletin/MS11-027.mspx

Version history

Version Comments Date
1.0 Aviso emitido 2010-06-09
1.1 Aviso actualizado por Microsoft (MS11-027) 2011-04-14