Husdawg System Requirements Lab Multiple Remote Code Execution Vulnerabilities
BID:31752
Info
Husdawg System Requirements Lab Multiple Remote Code Execution Vulnerabilities
| Bugtraq ID: | 31752 |
| Class: | Unknown |
| CVE: |
CVE-2008-4385 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 14 2008 12:00AM |
| Updated: | Nov 03 2008 03:25PM |
| Credit: | Husdawg |
| Vulnerable: |
Husdawg System Requirements Lab 0 |
| Not Vulnerable: |
Husdawg System Requirements Lab 3 |
Discussion
Husdawg System Requirements Lab Multiple Remote Code Execution Vulnerabilities
Husdawg System Requirements Lab ActiveX controls and Java applets are prone to multiple remote code-execution vulnerabilities.
Successful exploit will allow attackers to download and execute arbitrary files on the affected computer in the context of the application that uses the plugins.
Husdawg System Requirements Lab ActiveX controls and Java applets are prone to multiple remote code-execution vulnerabilities.
Successful exploit will allow attackers to download and execute arbitrary files on the affected computer in the context of the application that uses the plugins.
Exploit / POC
Husdawg System Requirements Lab Multiple Remote Code Execution Vulnerabilities
An attacker can exploit these issues by enticing an unsuspecting victim to view a malicious HTML page.
An attacker can exploit these issues by enticing an unsuspecting victim to view a malicious HTML page.
Solution / Fix
Husdawg System Requirements Lab Multiple Remote Code Execution Vulnerabilities
Solution:
The vendor released an advisory and fixes to address this issue. Please see the references for details.
NOTE: Microsoft released a security advisory (956391) and updates that fix the issue by setting the kill bit on the affected control. This update sets the kill bit only for CLSID: 67A5F8DC-1A4B-4D66-9F24-A704AD929EEE. Please see the references for more information.
UPDATE (October 29, 2008): Users with Microsoft SQL Server 2005 Reporting Services Add-in for Microsoft SharePoint Technologies who have installed this update will not be able to print until they upgrade to the latest version. See the Microsoft Security Advisory 956391 for details.
Solution:
The vendor released an advisory and fixes to address this issue. Please see the references for details.
NOTE: Microsoft released a security advisory (956391) and updates that fix the issue by setting the kill bit on the affected control. This update sets the kill bit only for CLSID: 67A5F8DC-1A4B-4D66-9F24-A704AD929EEE. Please see the references for more information.
UPDATE (October 29, 2008): Users with Microsoft SQL Server 2005 Reporting Services Add-in for Microsoft SharePoint Technologies who have installed this update will not be able to print until they upgrade to the latest version. See the Microsoft Security Advisory 956391 for details.
References
Husdawg System Requirements Lab Multiple Remote Code Execution Vulnerabilities
References:
References:
- Microsoft Knowledge Base Article 240797 (Microsoft)
- System Requirements Lab Homepage (Husdawg)
- Vulnerability Note VU#166651 (US-CERT)
- SEC Consult SA-20081016-0 :: Remote command execution in Instant Expert Analysis (Bernhard Mueller
- SEC Consult SA-20081016-0 :: Remote command execution in Instant Expert Analysis (Bernhard Mueller
- Husdawg Security Bulletin (Husdawg)
- Microsoft Security Advisory (956391) - Cumulative Security Update of ActiveX Kil (Microsoft)