Уязвимость модуля обработки графики

Высокая (7.5)

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

Microsoft

Microsoft Windows (1.1.4 x86 Windows 2000 Server SP4, 1.2.1 x86 Windows XP SP1, 1.2.2 x86 Windows XP SP2, 1.3.0 x86 Windows 2003 Server, 1.3.1 x86 Windows 2003 Server SP1, 2.2.0 x64 Windows XP, 2.3.0 x64 Windows 2003 Server, 3.3.0 i64 Windows 2003 Server , 3.3.1 i64 Windows 2003 Server SP1)

В модуле обработки графики имеется уязвимость удаленного запуска кода, вызванная методом обработки метафайлов Windows (WMF). Злоумышленник может воспользоваться ею с помощью специально сконструированного изображения в формате WMF, если пользователь посетит вредоносный веб-узел или откроет специально созданное вложение сообщения электронной почты. Воспользовавшись этой уязвимостью, злоумышленник может установить полный контроль над системой.

Используйте рекомендации производителя:
http://www.microsoft.com/technet/security/Bulletin/MS06-001.mspx

BUGTRAQ (20051227 Is this a new exploit?): http://www.securityfocus.com/archive/1/archive/1/420288/100/0/threaded
http://www.f-secure.com/weblog/archives/archive-122005.html#00000753
http://vil.mcafeesecurity.com/vil/content/v_137760.htm
CERT-VN (VU#181038): http://www.kb.cert.org/vuls/id/181038
BID (16074): http://www.securityfocus.com/bid/16074
FRSIRT (ADV-2005-3086): http://www.frsirt.com/english/advisories/2005/3086
BUGTRAQ (20051228 Re: Is this a new exploit?): http://www.securityfocus.com/archive/1/archive/1/420367/100/0/threaded
BUGTRAQ (20051227 Exploitation of Windows WMF on the web): http://www.securityfocus.com/archive/1/archive/1/420351/100/0/threaded
BUGTRAQ (20051228 RE: [Full-disclosure] Someone wasted a nice bug on spyware...): http://www.securityfocus.com/archive/1/archive/1/420357/100/0/threaded
BUGTRAQ (20051228 WMF Exploit): http://www.securityfocus.com/archive/1/archive/1/420378/100/0/threaded
http://www.microsoft.com/technet/security/advisory/912840.mspx
SECTRACK (1015416): http://securitytracker.com/id?1015416
BUGTRAQ (20051229 WMF exploit): http://www.securityfocus.com/archive/1/archive/1/420446/100/0/threaded
BUGTRAQ (20060103 WMF SETABORTPROC exploit): http://www.securityfocus.com/archive/1/archive/1/420684/100/0/threaded
BUGTRAQ (20060103 WMF round-up, updates and de-mystification): http://www.securityfocus.com/archive/1/archive/1/420682/100/0/threaded
BUGTRAQ (20060103 Re: [funsec] WMF round-up, updates and de-mystification): http://www.securityfocus.com/archive/1/archive/1/420687/100/0/threaded
http://linuxbox.org/pipermail/funsec/2006-January/002455.html
BUGTRAQ (20060104 Another WMF exploit workaround): http://www.securityfocus.com/archive/1/archive/1/420773/100/0/threaded
MS (MS06-001): http://www.microsoft.com/technet/security/bulletin/ms06-001.mspx
CERT (TA05-362A): http://www.us-cert.gov/cas/techalerts/TA05-362A.html
CERT (TA06-005A): http://www.us-cert.gov/cas/techalerts/TA06-005A.html
http://support.avaya.com/elmodocs2/security/ASA-2006-001.htm
OVAL (OVAL1433): http://oval.mitre.org/oval/definitions/data/oval1433.html
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375341
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420
OVAL (oval:org.mitre.oval:def:1433): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1433
OVAL (oval:org.mitre.oval:def:1431): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1431
OVAL (oval:org.mitre.oval:def:1460): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1460
OVAL (oval:org.mitre.oval:def:1492): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1492
OVAL (oval:org.mitre.oval:def:1564): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1564
OVAL (oval:org.mitre.oval:def:1612): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1612
BUGTRAQ (20051229 RE: WMF Exploit): http://www.securityfocus.com/archive/1/archive/1/420546/30/7730/threaded
BUGTRAQ (20060101 Re: RE: WMF Exploit): http://www.securityfocus.com/archive/1/archive/1/420664/30/7730/threaded
XF (win-wmf-execute-code(23846)): http://xforce.iss.net/xforce/xfdb/23846