Microsoft Windows Remote Access Phonebook Executable Loading Arbitrary Code Execution Vulnerability
BID:45404
Info
Microsoft Windows Remote Access Phonebook Executable Loading Arbitrary Code Execution Vulnerability
| Bugtraq ID: | 45404 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 15 2010 12:00AM |
| Updated: | Dec 15 2010 12:00AM |
| Credit: | Mister Teatime |
| Vulnerable: |
NRL OPIE Gold Tablet Pc NRL OPIE Gold Professional NRL OPIE Gold Media Center NRL OPIE Gold Embedded NRL OPIE 0 NRL OPIE - Gold X64 NRL OPIE - Gold Home Microsoft Windows XP Tablet PC Edition SP3 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Service Pack 3 0 Microsoft Windows XP Professional x64 Edition SP3 Microsoft Windows XP Professional x64 Edition SP2 Microsoft Windows XP Professional x64 Edition Microsoft Windows XP Professional SP3 Microsoft Windows XP Professional SP2 Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Media Center Edition SP3 Microsoft Windows XP Media Center Edition SP2 Microsoft Windows XP Media Center Edition SP1 Microsoft Windows XP Media Center Edition Microsoft Windows XP Home SP3 Microsoft Windows XP Home SP2 Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows XP Gold 0 Microsoft Windows XP Embedded SP3 Microsoft Windows XP Embedded SP2 Microsoft Windows XP Embedded SP1 Microsoft Windows XP Embedded Microsoft Windows XP 64-bit Edition SP1 Microsoft Windows XP 64-bit Edition Microsoft Windows XP 0 |
| Not Vulnerable: | |
Discussion
Microsoft Windows Remote Access Phonebook Executable Loading Arbitrary Code Execution Vulnerability
Microsoft Windows is prone to a vulnerability that lets attackers execute arbitrary code.
An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted executable file.
Microsoft Windows is prone to a vulnerability that lets attackers execute arbitrary code.
An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted executable file.
Exploit / POC
Microsoft Windows Remote Access Phonebook Executable Loading Arbitrary Code Execution Vulnerability
Attackers must entice a user into opening a file on a remote WebDAV or SMB share to exploit this issue.
Attackers must entice a user into opening a file on a remote WebDAV or SMB share to exploit this issue.
Solution / Fix
Microsoft Windows Remote Access Phonebook Executable Loading Arbitrary Code Execution Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Microsoft Windows Remote Access Phonebook Executable Loading Arbitrary Code Execution Vulnerability
References:
References:
- Windows XP Homepage (Microsoft)