|
|
Family: Windows : Microsoft Bulletins --> Category: infos
Vulnerability in Vector Markup Language Could Allow Remote Code Execution (925486) Vulnerability Scan
Vulnerability Scan Summary
Acertains the presence of update 925486
Detailed Explanation for this Vulnerability Test
Synopsis :
Arbitrary code can be executed on the remote host through the email client or
the web browser.
Description :
The remote host is running a version of Internet Explorer or Outlook Express
which is vulnerable to a bug in the Vector Markup Language (VML) handling routine
which may allow a possible hacker execute arbitrary code on the remote host by sending
a specially crafted email or by luring a user on the remote host into visiting
a rogue web site.
Solution :
Microsoft has released a set of patches for Windows 2000, XP and 2003 :
http://www.microsoft.com/technet/security/Bulletin/MS06-055.mspx
Threat Level:
High / CVSS Base Score : 8.0
(AV:R/AC:H/Au:NR/C:C/I:C/A:C/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|
