(MS11-016) Vulnerability in Microsoft Groove Could Allow Remote Code Execution (2494047)
Publish Date: 18 mai 2011
Gravité: : Élevé
Identifiant(s) CVE: : CVE-2010-3146
Date du conseil: 18 mai 2011
Description
This update resolves a vulnerability in Microsoft Groove. The vulnerability can be successfully exploited if a user opens a legitimate Groove-related file that is located in the same network directory as a specially crafted library file. Users with administrative rights may be affected more than users whose accounts are configured to have fewer user rights on the system.
Information Exposure Rating:
For information on patches specific to the affected software, please proceed to the Microsoft Web page.
Solutions
Trend Micro Deep Security DPI Rule Number: 1004373
Trend Micro Deep Security DPI Rule Name: Identified Microsoft DLL File Over Network Share
Affected software and version:
- Microsoft Groove 2007 Service Pack 2