Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Производитель ПО
Наименование ПО
Microsoft Outlook
(2000, 2002, 2003)
Microsoft Updates
(KB2449798, KB887617, KB892841, KB892842, KB892843, KB894689, KB921593, KB921594, KB924085, KB945432, KB946985, KB946986, KB973702, KB973705, KB980371, KB980373)
Описание
В программах Microsoft Outlook и Microsoft Exchange Server имеется уязвимость удаленного запуска кода, обусловленная методом декодировки вложения MIME формата Transport Neutral Encapsulation Format (TNEF).
Как исправить
Используйте рекомендации производителя:
http://www.microsoft.com/technet/security/Bulletin/MS06-003.mspx
http://www.microsoft.com/technet/security/Bulletin/MS06-003.mspx
Ссылки
MS (MS06-003): http://www.microsoft.com/technet/security/bulletin/ms06-003.mspx
CERT-VN (VU#252146): http://www.kb.cert.org/vuls/id/252146
BID (16197): http://www.securityfocus.com/bid/16197
FRSIRT (ADV-2006-0119): http://www.frsirt.com/english/advisories/2006/0119
BUGTRAQ (20060110 Microsoft Outlook Critical Vulnerability): http://www.securityfocus.com/archive/1/archive/1/421520/100/0/threaded
BUGTRAQ (20060110 Microsoft Exchange Critical Vulnerability): http://www.securityfocus.com/archive/1/archive/1/421518/100/0/threaded
CERT (TA06-010A): http://www.us-cert.gov/cas/techalerts/TA06-010A.html
SECTRACK (1015461): http://securitytracker.com/id?1015461
SECTRACK (1015460): http://securitytracker.com/id?1015460
http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm
OVAL (oval:org.mitre.oval:def:1082): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1082
OVAL (oval:org.mitre.oval:def:1165): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1165
OVAL (oval:org.mitre.oval:def:1316): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1316
OVAL (oval:org.mitre.oval:def:1456): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1456
OVAL (oval:org.mitre.oval:def:1485): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1485
OVAL (oval:org.mitre.oval:def:624): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:624
XF (win-tnef-overflow(22878)): http://xforce.iss.net/xforce/xfdb/22878
CERT-VN (VU#252146): http://www.kb.cert.org/vuls/id/252146
BID (16197): http://www.securityfocus.com/bid/16197
FRSIRT (ADV-2006-0119): http://www.frsirt.com/english/advisories/2006/0119
BUGTRAQ (20060110 Microsoft Outlook Critical Vulnerability): http://www.securityfocus.com/archive/1/archive/1/421520/100/0/threaded
BUGTRAQ (20060110 Microsoft Exchange Critical Vulnerability): http://www.securityfocus.com/archive/1/archive/1/421518/100/0/threaded
CERT (TA06-010A): http://www.us-cert.gov/cas/techalerts/TA06-010A.html
SECTRACK (1015461): http://securitytracker.com/id?1015461
SECTRACK (1015460): http://securitytracker.com/id?1015460
http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm
OVAL (oval:org.mitre.oval:def:1082): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1082
OVAL (oval:org.mitre.oval:def:1165): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1165
OVAL (oval:org.mitre.oval:def:1316): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1316
OVAL (oval:org.mitre.oval:def:1456): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1456
OVAL (oval:org.mitre.oval:def:1485): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1485
OVAL (oval:org.mitre.oval:def:624): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:624
XF (win-tnef-overflow(22878)): http://xforce.iss.net/xforce/xfdb/22878
