MS00-028_SERVERSIDE_IMAGE_MAP_COMPONENTS_EXPLOIT
Data de publicação: 04 fevereiro 2011
Schweregrad: : Crítico
Data do informe: 04 fevereiro 2011
Descrição
The FrontPage 97 and 98 Server Extensions include two components, Htimage.exe and Imagemap.exe. These components contain unvalidated buffers that could be used to run arbitrary code. The vulnerability can cause malicious user to perform activities that is not available through the Web site.
Exposição das informações
Users of Trend Micro PC-cillin Internet Security and Network VirusWall can detect this exploit at the network layer with Network Virus Pattern (NVP) 10161 or later.
Download the latest NVW pattern file from the following site:
http://www.trendmicro.com/download/product.asp?productid=45
Software infectado e versão:
- FrontPage 97 Server Extensions (which ship as part of FrontPage 97)
- FrontPage 98 Server Extensions (which ship as part of FrontPage)
- Microsoft® Windows NT® 4.0 Option Pack
- which is the primary distribution mechanism for Internet Information Server 4.0
- Personal Web Server 4.0 (which ships as part of Windows® 95 and 98)