exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Secunia Security Advisory 19606

Secunia Security Advisory 19606
Posted Apr 12, 2006
Authored by Secunia | Site secunia.com

Secunia Security Advisory - A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system.

tags | advisory
systems | windows
SHA-256 | 377e6241d2733f34f4cd0f5ad5cdea30de333284acbcb4a55d719e5f60348850

Secunia Security Advisory 19606

Change Mirror Download


TITLE:
Microsoft Windows Explorer COM Object Handling Vulnerability

SECUNIA ADVISORY ID:
SA19606

VERIFY ADVISORY:
https://secunia.com/advisories/19606/

CRITICAL:
Moderately critical

IMPACT:
System access

WHERE:
>From remote

OPERATING SYSTEM:
Microsoft Windows XP Professional
https://secunia.com/product/22/
Microsoft Windows XP Home Edition
https://secunia.com/product/16/
Microsoft Windows Server 2003 Web Edition
https://secunia.com/product/1176/
Microsoft Windows Server 2003 Standard Edition
https://secunia.com/product/1173/
Microsoft Windows Server 2003 Enterprise Edition
https://secunia.com/product/1174/
Microsoft Windows Server 2003 Datacenter Edition
https://secunia.com/product/1175/
Microsoft Windows 2000 Server
https://secunia.com/product/20/
Microsoft Windows 2000 Professional
https://secunia.com/product/1/
Microsoft Windows 2000 Datacenter Server
https://secunia.com/product/1177/
Microsoft Windows 2000 Advanced Server
https://secunia.com/product/21/

DESCRIPTION:
A vulnerability has been reported in Microsoft Windows, which can be
exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error in Windows Explorer when
handling of COM objects. This can be exploited to execute arbitrary
code by tricking a user into connecting to a malicious file server.

Successful exploitation requires that a netbios/CIFS connections can
be established to a malicious system.

SOLUTION:
Apply patches.

Microsoft Windows 2000 (requires Service Pack 4):
https://www.microsoft.com/downloads/details.aspx?FamilyId=AE28BC65-3A5E-4497-AD05-2CDE8E7B5E95

Microsoft Windows XP (requires Service Pack 1 or Service Pack 2):
https://www.microsoft.com/downloads/details.aspx?FamilyId=392C2F1B-AA24-48E5-8D5B-EA56341DB936

Microsoft Windows XP Professional x64 Edition:
https://www.microsoft.com/downloads/details.aspx?FamilyId=11A5195E-3F32-41F9-AB39-68A099EE945D

Microsoft Windows Server 2003 (with or without Service Pack 1):
https://www.microsoft.com/downloads/details.aspx?FamilyId=099EE535-8B31-4356-B3FB-EF524C20A424

Microsoft Windows Server 2003 for Itanium (with or without SP1):
https://www.microsoft.com/downloads/details.aspx?FamilyId=E3C7E736-1583-4BD5-B661-A9AADDFA5B86

Microsoft Windows Server 2003 x64 Edition:
https://www.microsoft.com/downloads/details.aspx?FamilyId=238AB809-5A7E-4678-B01B-38FD82E9C701

PROVIDED AND/OR DISCOVERED BY:
The vendor credits NISCC.

ORIGINAL ADVISORY:
MS06-015 (KB908531):
https://www.microsoft.com/technet/security/Bulletin/MS06-015.mspx

OTHER REFERENCES:
US-CERT VU#641460:
https://www.kb.cert.org/vuls/id/641460

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
https://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
https://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Login or Register to add favorites

File Archive:

November 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Nov 1st
    30 Files
  • 2
    Nov 2nd
    0 Files
  • 3
    Nov 3rd
    0 Files
  • 4
    Nov 4th
    12 Files
  • 5
    Nov 5th
    44 Files
  • 6
    Nov 6th
    18 Files
  • 7
    Nov 7th
    9 Files
  • 8
    Nov 8th
    8 Files
  • 9
    Nov 9th
    3 Files
  • 10
    Nov 10th
    0 Files
  • 11
    Nov 11th
    14 Files
  • 12
    Nov 12th
    0 Files
  • 13
    Nov 13th
    0 Files
  • 14
    Nov 14th
    0 Files
  • 15
    Nov 15th
    0 Files
  • 16
    Nov 16th
    0 Files
  • 17
    Nov 17th
    0 Files
  • 18
    Nov 18th
    0 Files
  • 19
    Nov 19th
    0 Files
  • 20
    Nov 20th
    0 Files
  • 21
    Nov 21st
    0 Files
  • 22
    Nov 22nd
    0 Files
  • 23
    Nov 23rd
    0 Files
  • 24
    Nov 24th
    0 Files
  • 25
    Nov 25th
    0 Files
  • 26
    Nov 26th
    0 Files
  • 27
    Nov 27th
    0 Files
  • 28
    Nov 28th
    0 Files
  • 29
    Nov 29th
    0 Files
  • 30
    Nov 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2024 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close