Trend Micro Security

Microsoft Windows Vista Windows Mail Local File Execution

  危険度: : 緊急
  CVE識別番号: CVE-2007-1658

  概要

Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a (1) local file or (2) UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as demonstrated using C:/windows/system32/winrm (winrm.cmd) and migwiz (migwiz.exe).

  トレンドマイクロの対策

Apply associated Trend Micro DPI Rules.

  対応方法

  Trend Micro Deep Security DPI Rule Number: 1000973
  Trend Micro Deep Security DPI Rule Name: 1000973 - Microsoft Windows Vista Windows Mail Local File Execution