Schweregrad: : Crítico
  Data do informe: 04 fevereiro 2011

  Descrição

The FrontPage 97 and 98 Server Extensions include two components, Htimage.exe and Imagemap.exe. These components contain unvalidated buffers that could be used to run arbitrary code. The vulnerability can cause malicious user to perform activities that is not available through  the Web site.

  Exposição das informações

Users of Trend Micro PC-cillin Internet Security and Network VirusWall can detect this exploit at the network layer with Network Virus Pattern (NVP) 10161 or later.
Download the latest NVW pattern file from the following site: 
http://www.trendmicro.com/download/product.asp?productid=45

  Software infectado e versão:

  • FrontPage 97 Server Extensions (which ship as part of FrontPage 97)
  • FrontPage 98 Server Extensions (which ship as part of FrontPage)
  • Microsoft® Windows NT® 4.0 Option Pack
  • which is the primary distribution mechanism for Internet Information Server 4.0
  • Personal Web Server 4.0 (which ships as part of Windows® 95 and 98)