MS10-103:Microsoft Publisher の脆弱性により、リモートでコードが実行される (2292970)
2011年2月10日
危険度: : 高
CVE Identifier: CVE-2010-2569,CVE-2010-2570,CVE-2010-2571,CVE-2010-3954,CVE-2010-3955
概要
This update resolves vulnerabilities in Microsoft Publisher that could allow remote code execution. An attacker can exploit the vulnerability by opening a specially crafted Publisher file. An attacker could take complete control over an affected system and install programs; view, change, or delete data; or create new user accounts will full user rights. More specifically, this update addresses the vulnerabilities by correcting the way that Microsoft Publisher parses specially crafted Publisher files.
トレンドマイクロの対策
詳しい情報については以下のサイトをご参照ください。
対応方法
影響を受けるソフトウェア
- Microsoft Office XP Service Pack 3
- Microsoft Office 2003 Service Pack 3
- Microsoft Office 2007 Service Pack 2
- Microsoft Office 2010 (32-bit editions)
- Microsoft Office 2010 (64-bit editions)