Microsoft Windows Vista Windows Mail Local File Execution
Publish Date: 21 de июля de 2015
Severity: : Critical
CVE Kennungen: : CVE-2007-1658
Advisory Date: 21 de июля de 2015
DESCRIPTION
Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a (1) local file or (2) UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as demonstrated using C:/windows/system32/winrm (winrm.cmd) and migwiz (migwiz.exe).
INFORMATION EXPOSURE
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1000973
Trend Micro Deep Security DPI Rule Name: 1000973 - Microsoft Windows Vista Windows Mail Local File Execution