Vulnerability Bulletins |
Aumento de privilegios en versiones Coreanas de Microsoft Windows y Office |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Aumento de privilegios |
| Dificulty | Experto |
| Required attacker level | Acceso remoto con cuenta |
System information |
|
| Property | Value |
| Affected manufacturer | Microsoft |
| Affected software |
Microsoft Windows XP SP1, SP2 Microsoft Windows Server 2003 <= SP1 Microsoft Office 2003 |
Description |
|
|
Se ha descubierto una vulnerabilidad en las versiones Coreanas de Microsoft Windows XP SP1 y SP2, Microsoft Windows Server 2003 hasta la versión SP1 y Microsoft Office 2003. La vulnerabilidad reside en un error no especificado en Korean Input Method Editor (IME) relacionado con algunas funcionalidades que se exponen y que se ejecutan en contexto LocalSystem. Un atacante local podría elevar sus privilegios. |
|
Solution |
|
|
Actualización de software Microsoft Microsoft Windows XP SP1, Microsoft Windows XP SP2 http://www.microsoft.com/downloads/details.aspx?FamilyId=290453DF-1CAE-4691-B20C-5D65D92216BF Microsoft Windows XP Professional x64 http://www.microsoft.com/downloads/details.aspx?FamilyId=7D75BF5C-2E1D-4793-B7D1-DD372A99ECA5 Microsoft Windows Server 2003, Microsoft Windows Server 2003 SP1 http://www.microsoft.com/downloads/details.aspx?FamilyId=A092BA0F-C753-444B-A572-492E4ECB2D3F Microsoft Windows Server 2003 Itanium, Microsoft Windows Server 2003 SP1 Itanium http://www.microsoft.com/downloads/details.aspx?FamilyId=8479C2EB-0FB6-4879-9C3D-B49BD864A71C Microsoft Windows Server 2003 x64 http://www.microsoft.com/downloads/details.aspx?FamilyId=66E495E8-CD52-4E76-B20A-4471FA941556 Microsoft Office 2003 SP1, SP2 http://www.microsoft.com/downloads/details.aspx?FamilyId=8E6F16E9-CD73-47D5-887E-616DB9B09591&displaylang=en Microsoft Office 2003 Multilingual User Interface Packs http://www.microsoft.com/downloads/details.aspx?FamilyId=986F9A8D-AFE7-455A-B78D-0795CBB0E80E&displaylang=en Microsoft Office Visio 2003 Multilingual User Interface Packs http://www.microsoft.com/downloads/details.aspx?FamilyId=5A4D0A92-2DFC-4F8B-9D14-138CEA57AF96&displaylang=en Microsoft Office Project 2003 Multilingual User Interface Packs http://www.microsoft.com/downloads/details.aspx?FamilyId=22C96D7F-F384-4678-9AC0-3A11B81A4C1D&displaylang=en Microsoft Office 2003 Proofing Tools http://www.microsoft.com/downloads/details.aspx?FamilyId=32CF9F59-FFBD-45E5-A4D2-690183462D0F&displaylang=en Microsoft Office Visio 2003 http://www.microsoft.com/downloads/details.aspx?FamilyId=8E6F16E9-CD73-47D5-887E-616DB9B09591&displaylang=en Microsoft Office OneNote 2003 http://www.microsoft.com/downloads/details.aspx?FamilyId=8E6F16E9-CD73-47D5-887E-616DB9B09591&displaylang=en Microsoft Office Project 2003 http://www.microsoft.com/downloads/details.aspx?FamilyId=8E6F16E9-CD73-47D5-887E-616DB9B09591&displaylang=en |
|
Standar resources |
|
| Property | Value |
| CVE | CVE-2006-0008 |
| BID | |
Other resources |
|
|
Microsoft Security Bulletin (MS06-009) http://www.microsoft.com/technet/security/Bulletin/MS06-009.mspx |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2006-02-15 |