Vulnerability Bulletins |
Ejecución de código remota al procesar imágenes ART en Microsoft Windows |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | Microsoft |
| Affected software |
Microsoft Windows XP Service Pack 1 Microsoft Windows XP Service Pack 2 Microsoft Windows XP Professional x64 Edition Microsoft Windows Server 2003 Microsoft Windows Server 2003 Service Pack 1 Microsoft Windows Server 2003 Itanium Microsoft Windows Server 2003 SP1 Itanium Microsoft Windows Server 2003 x64 Edition Internet Explorer 5.01 Service Pack 4 / Microsoft Windows 2000 Service Pack 4 Internet Explorer 6 Service Pack 1 / Microsoft Windows 2000 Service Pack 4 |
Description |
|
|
Se ha descubierto una vulnerabilidad en varias versiones de Microsoft Windows. La vulnerabilidad reside en el manejo de imágenes ART. Un atacante remoto podría ejecutar código arbitrario mediante una imagen ART especialmente diseñada. |
|
Solution |
|
|
Actualización de software Microsoft Microsoft Windows XP Service Pack 1 http://www.microsoft.com/downloads/details.aspx?FamilyId=F6328F82-457E-44CB-95FB-2DB0E8C9EE3C Microsoft Windows XP Service Pack 2 http://www.microsoft.com/downloads/details.aspx?FamilyId=71022EA1-94CB-4FE9-B89E-46876D068B9A Microsoft Windows XP Professional x64 Edition http://www.microsoft.com/downloads/details.aspx?FamilyId=A386523E-96AB-43ED-B189-E13AF497B685 Microsoft Windows Server 2003 / Microsoft Windows Server 2003 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?FamilyId=56DF0CF2-9214-4B23-9034-C59E8B7126D6 Microsoft Windows Server 2003 Itanium / Microsoft Windows Server 2003 SP1 Itanium http://www.microsoft.com/downloads/details.aspx?FamilyId=5E1B95C3-7E75-4468-829C-1DC7B4ECE5D0 Microsoft Windows Server 2003 x64 Edition http://www.microsoft.com/downloads/details.aspx?FamilyId=4DC13B7C-01AB-4BB6-9766-0FE0D02E410D Internet Explorer 5.01 Service Pack 4 / Microsoft Windows 2000 Service Pack 4 http://www.microsoft.com/downloads/details.aspx?FamilyId=AE6D8DA7-B170-416D-8812-265FFA757301 Internet Explorer 6 Service Pack 1 / Microsoft Windows 2000 Service Pack 4 http://www.microsoft.com/downloads/details.aspx?FamilyId=F6328F82-457E-44CB-95FB-2DB0E8C9EE3C |
|
Standar resources |
|
| Property | Value |
| CVE | CVE-2006-2378 |
| BID | 18394 |
Other resources |
|
|
Microsoft Security Bulletin (MS06-022) http://www.microsoft.com/technet/security/Bulletin/MS06-022.mspx |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2006-06-14 |