Gravedad: Crítico
  Fecha recomendada: 04 de febrero de 2011

  Descripción

The FrontPage 97 and 98 Server Extensions include two components, Htimage.exe and Imagemap.exe. These components contain unvalidated buffers that could be used to run arbitrary code. The vulnerability can cause malicious user to perform activities that is not available through  the Web site.

  Revelación de la información

Users of Trend Micro PC-cillin Internet Security and Network VirusWall can detect this exploit at the network layer with Network Virus Pattern (NVP) 10161 or later.
Download the latest NVW pattern file from the following site: 
http://www.trendmicro.com/download/product.asp?productid=45

  Software y versión afectados

  • FrontPage 97 Server Extensions (which ship as part of FrontPage 97)
  • FrontPage 98 Server Extensions (which ship as part of FrontPage)
  • Microsoft® Windows NT® 4.0 Option Pack
  • which is the primary distribution mechanism for Internet Information Server 4.0
  • Personal Web Server 4.0 (which ships as part of Windows® 95 and 98)