ID de Prueba:	1.3.6.1.4.1.25623.1.0.800343
Categoría:	Windows
Título:	Microsoft Word 2007 Sensitive Information Disclosure Vulnerability
Resumen:	Microsoft Word is prone to an information disclosure vulnerability.
Descripción:	Summary: Microsoft Word is prone to an information disclosure vulnerability. Vulnerability Insight: In MS Word when the Save as PDF add-on is enabled, places an absolute pathname in the Subject field during an Email as PDF operation. Vulnerability Impact: Successful exploitation could allow remote attackers to retrieve sensitive information about sender's account name and a Temporary Internet Files subdirectory name. Affected Software/OS: Microsoft Office Word 2007. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-6063 Bugtraq: 20080110 Word 2007 Email as PDF path disclosure flaw (Google Search) http://www.securityfocus.com/archive/1/486088/100/0/threaded
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.