ID de Prueba:	1.3.6.1.4.1.25623.1.0.800482
Categoría:	Windows
Título:	Microsoft Internet Explorer 'VBScript' RCE Vulnerability
Resumen:	Internet Explorer and VBScript are prone to a remote code; execution (RCE) vulnerability.
Descripción:	Summary: Internet Explorer and VBScript are prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: The flaw exists in the way that 'VBScript' interacts with Windows Help files when using Internet Explorer. If a malicious Web site displayed a specially crafted dialog box and a user pressed the F1 key, it allows arbitrary code to be executed in the security context of the currently logged-on user. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary code via specially crafted attack. Affected Software/OS: Microsoft Internet Explorer version 6.x, 7.x and 8.x. Solution: Apply the latest updates. Please see the references for more information. CVSS Score: 7.6 CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0483 BugTraq ID: 38463 http://www.securityfocus.com/bid/38463 Cert/CC Advisory: TA10-103A http://www.us-cert.gov/cas/techalerts/TA10-103A.html CERT/CC vulnerability note: VU#612021 http://www.kb.cert.org/vuls/id/612021 http://isec.pl/vulnerabilities/isec-0027-msgbox-helpfile-ie.txt http://isec.pl/vulnerabilities10.html http://www.computerworld.com/s/article/9163298/New_zero_day_involves_IE_puts_Windows_XP_users_at_risk http://www.theregister.co.uk/2010/03/01/ie_code_execution_bug/ https://www.metasploit.com/svn/framework3/trunk/modules/exploits/windows/browser/ie_winhlp32.rb Microsoft Security Bulletin: MS10-022 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-022 http://www.osvdb.org/62632 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7170 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8654 http://securitytracker.com/id?1023668 http://secunia.com/advisories/38727 http://www.vupen.com/english/advisories/2010/0485 XForce ISS Database: ms-win-msgbox-code-execution(56558) https://exchange.xforce.ibmcloud.com/vulnerabilities/56558
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.