Vulnerability Bulletins |
Ejecución de código en Microsoft Windows |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Denegación de Servicio |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | Microsoft |
| Affected software |
Windows XP Service Pack 3 Windows XP Professional x64 Edition Service Pack 2 Windows Server 2003 Service Pack 2 Windows Server 2003 x64 Edition Service Pack 2 Windows Server 2003 with SP2 for Itanium-based Systems |
Description |
|
|
CVE-2011-0039: La vulnerabilidad reside en el modo en el que Microsoft Windows Local Security Authority Subsystem Service (LSASS) porcesa las peticiones de autenticación especialmente manipuladas. Un atacante remoto podría ejecutar código mediante métodos no especificados. |
|
Solution |
|
|
Actualización de software Microsoft (MS11-014) Ver tabla de actualizaciones en: http://www.microsoft.com/technet/security/Bulletin/MS11-014.mspx |
|
Standar resources |
|
| Property | Value |
| CVE | CVE-2011-0039 |
| BID | |
Other resources |
|
|
Microsoft Security Bulletin (MS11-014) http://www.microsoft.com/technet/security/Bulletin/MS11-014.mspx |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2011-02-09 |