Gravité: : Critique
  Date du conseil: 04 février 2011

  Description

The FrontPage 97 and 98 Server Extensions include two components, Htimage.exe and Imagemap.exe. These components contain unvalidated buffers that could be used to run arbitrary code. The vulnerability can cause malicious user to perform activities that is not available through  the Web site.

  Information Exposure Rating:

Users of Trend Micro PC-cillin Internet Security and Network VirusWall can detect this exploit at the network layer with Network Virus Pattern (NVP) 10161 or later.
Download the latest NVW pattern file from the following site: 
http://www.trendmicro.com/download/product.asp?productid=45

  Affected software and version:

  • FrontPage 97 Server Extensions (which ship as part of FrontPage 97)
  • FrontPage 98 Server Extensions (which ship as part of FrontPage)
  • Microsoft® Windows NT® 4.0 Option Pack
  • which is the primary distribution mechanism for Internet Information Server 4.0
  • Personal Web Server 4.0 (which ships as part of Windows® 95 and 98)