Vulnerability Bulletins |
Vulnerabilidad en MSDDS.DLL explotable a través de Internet Explorer |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Principiante |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | Microsoft |
| Affected software |
Microsoft Internet Explorer 5.01 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 6.x |
Description |
|
|
Se ha descubierto una vulnerabilidad en Internet Explorer. La vulnerabilidad reside en un error en el objeto COM MSDDS.DLL (versiones 7.0.9064.9112 y 7.0.9446.0) cuando es instanciado por Internet Explorer. La explotación de esta vulnerabilidad podría permitir a un atacante remoto ejecutar código arbitrario mediante la visita del usuario a una página Web especialmente diseñada. |
|
Solution |
|
|
Actualización de software Microsoft Internet Explorer 5.01 SP4 / Microsoft Windows 2000 SP4 http://www.microsoft.com/downloads/details.aspx?FamilyId=F9880B00-4D2C-4D63-AD71-07B7D1D823F7 Internet Explorer 6 SP1 / Microsoft Windows 2000 SP4 Microsoft Windows XP SP1 http://www.microsoft.com/downloads/details.aspx?FamilyId=0BACB81F-2802-4B3D-A4F5-E70492F14145 Internet Explorer 6 / Microsoft Windows XP SP2 http://www.microsoft.com/downloads/details.aspx?FamilyId=A98950A5-0872-4054-B44D-CB6AF0242AEA Internet Explorer 6 / Microsoft Windows Server 2003 Microsoft Windows Server 2003 SP1 http://www.microsoft.com/downloads/details.aspx?FamilyId=F0935E39-C367-4D06-A80C-F376355436C2 Internet Explorer 6 / Microsoft Windows Server 2003 Itanium Microsoft Windows Server 2003 SP1 Itanium http://www.microsoft.com/downloads/details.aspx?FamilyId=5E217E53-0358-4B6E-A814-9E49C1E1EB54 Internet Explorer 6 / Microsoft Windows Server 2003 x64 http://www.microsoft.com/downloads/details.aspx?FamilyId=1C0B073B-C949-42D0-BDB9-205EA2802A8D Internet Explorer 6 / Microsoft Windows XP Professional x64 http://www.microsoft.com/downloads/details.aspx?FamilyId=12E3B894-C85C-439D-9541-228E9303FFBE |
|
Standar resources |
|
| Property | Value |
| CVE | CAN-2005-2127 |
| BID | |
Other resources |
|
|
Microsoft Security Advisory (906267) http://www.microsoft.com/technet/security/advisory/906267.mspx Microsoft Security Bulletin (MS05-052) http://www.microsoft.com/technet/security/Bulletin/MS05-052.mspx |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2005-08-22 |
| 1.1 | Aviso emitido por Microsoft (MS05-052) | 2005-10-14 |