Vulnerability Bulletins |
Desbordamiento de Búfer en el Centro de Ayuda y Soporte de Windows podría comprometer el sistema |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Avanzado |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | Microsoft |
| Affected software |
Microsoft Windows NT Workstation 4.0, Service Pack 6a Microsoft Windows NT Server 4.0, Service Pack 6a Microsoft Windows NT Server 4.0, Terminal Server Edition Service Pack 6 Microsoft Windows 2000, Service Pack 2 Microsoft Windows 2000, Service Pack 3, Service Pack 4 Microsoft Windows XP Gold, Service Pack 1 Microsoft Windows XP 64-bit Edition Microsoft Windows XP 64-bit Edition Version 2003 Microsoft Windows Server 2003 Microsoft Windows Server 2003 64-bit Editio |
Description |
|
| Existe una vulnerabilidad en la función del centro de ayuda en Windows XP y Windows 2003 Server. El código afectado también se incluye en otros sistemas Windows, aunque en ellos no se ha identificado ningún ataque hasta ahora porque el protocolo de HCP está soportado en esas plataformas. La vulnerabilidad ocurre porque un archivo asociado al protocolo HCP contiene un búfer no comprobado. | |
Solution |
|
|
Actualización de software Microsoft Windows NT Workstation 4.0, Service Pack 6a http://www.microsoft.com/downloads/details.aspx?FamilyId=7597FCF4-6615-4074-9E46-A17D808ED38D Microsoft Windows NT Server 4.0, Service Pack 6a http://www.microsoft.com/downloads/details.aspx?FamilyId=B1949456-996A-485A-9A28-79FD79F26A1B Microsoft Windows NT Server 4.0, Terminal Server Edition Service Pack 6 http://www.microsoft.com/downloads/details.aspx?FamilyId=64AB4B66-1A6E-4264-93A8-26CDB98B05A8 Microsoft Windows 2000, Service Pack 2 http://www.microsoft.com/downloads/details.aspx?FamilyId=A0061377-1683-4C13-9527-5534F6C7CF85 Microsoft Windows 2000, Service Pack 3, Service Pack 4 http://www.microsoft.com/downloads/details.aspx?FamilyId=99F1B40D-906A-4945-A021-4B494CCCBDE0 Microsoft Windows XP Gold, Service Pack 1 http://www.microsoft.com/downloads/details.aspx?FamilyId=F02DA309-4B0A-4438-A0B9-5B67414C3833 Microsoft Windows XP 64-bit Edition http://www.microsoft.com/downloads/details.aspx?FamilyId=2BE95254-4C65-4CA5-80A5-55FDF5AA2296 Microsoft Windows XP 64-bit Edition Version 2003 http://www.microsoft.com/downloads/details.aspx?FamilyId=8B990946-84C8-4C91-899C-5A44EC13174E Microsoft Windows Server 2003 http://www.microsoft.com/downloads/details.aspx?FamilyId=1DF106F3-7EC4-4EB0-9143-C1E3C9E2F5F8 Microsoft Windows Server 2003 64-bit Edition http://www.microsoft.com/downloads/details.aspx?FamilyId=8B990946-84C8-4C91-899C-5A44EC13174E |
|
Standar resources |
|
| Property | Value |
| CVE | CAN-2003-0711 |
| BID | |
Other resources |
|
|
Microsoft Security Bulletin MS03-044 http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-044.asp |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2003-10-16 |