Security Lab

Выполнение произвольного кода в Microsoft Windows

Дата публикации:11.10.2011
Дата изменения:14.10.2011
Всего просмотров:1971
Опасность:
Высокая
Наличие исправления: Да
Количество уязвимостей:1
CVSSv2 рейтинг: 10 (AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:O/RC:C)
CVE ID: CVE-2011-1253
Вектор эксплуатации: Удаленная
Воздействие: Компрометация системы
CWE ID: Нет данных
Наличие эксплоита: Нет данных
Уязвимые продукты: Microsoft Windows XP Professional
Microsoft Windows XP Home Edition
Microsoft Windows Storage Server 2003
Microsoft Windows Server 2003 Web Edition
Microsoft Windows Server 2003 Standard Edition
Microsoft Windows Server 2003 Enterprise Edition
Microsoft Windows Server 2003 Datacenter Edition
Microsoft Windows Server 2008
Microsoft Windows 7
Microsoft Silverlight 2
Microsoft Silverlight 3.x
Microsoft Silverlight 4.x

Приложение:

Microsoft Windows XP
Microsoft Windows 2003
Microsoft Windows Vista
Microsoft Windows Server 2008
Microsoft Windows 7

Описание:
Уязвимость позволяет удаленному пользователю повышать свои привилегии на целевой системе.

Уязвимость существует из-за ошибки наследований внутри классов в. Удаленный пользователь может с помощью специально сформированного Silverlight приложения выполнить произвольный код на целевой системе.

URL производителя: http://microsoft.com

Решение: Установите обновления из сайта производителя.

Windows XP Service Pack 3

 

Microsoft .NET Framework 1.0 Service Pack 3
http://www.microsoft.com/downloads/details.aspx?familyid=a54a7ad5-0504-4cc6-9eca-ba9f31c35a17

Microsoft .NET Framework 1.1 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=6100e577-deb5-4395-b851-e19e0ca79507

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=719b3da5-52ca-4d56-a2c5-69711039e59d

Microsoft .NET Framework 4
http://www.microsoft.com/downloads/details.aspx?familyid=770e7b58-6544-4f59-9893-b3eadf6d6c8a

 

Windows XP Professional x64 Edition Service Pack 2

 

Microsoft .NET Framework 1.1 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=6100e577-deb5-4395-b851-e19e0ca79507

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=719b3da5-52ca-4d56-a2c5-69711039e59d

Microsoft .NET Framework 4
http://www.microsoft.com/downloads/details.aspx?familyid=770e7b58-6544-4f59-9893-b3eadf6d6c8a

 

Windows Server 2003 Service Pack 2

 

Microsoft .NET Framework 1.1 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=b968b0bd-577b-4ea2-a192-a80fe7c20791

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=719b3da5-52ca-4d56-a2c5-69711039e59d

Microsoft .NET Framework 4
http://www.microsoft.com/downloads/details.aspx?familyid=770e7b58-6544-4f59-9893-b3eadf6d6c8a

 

Windows Server 2003 x64 Edition Service Pack 2

 

Microsoft .NET Framework 1.1 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=6100e577-deb5-4395-b851-e19e0ca79507

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=719b3da5-52ca-4d56-a2c5-69711039e59d

Microsoft .NET Framework 4
http://www.microsoft.com/downloads/details.aspx?familyid=770e7b58-6544-4f59-9893-b3eadf6d6c8a

 

Windows Server 2003 with SP2 for Itanium-based Systems

 

Microsoft .NET Framework 1.1 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=6100e577-deb5-4395-b851-e19e0ca79507

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=719b3da5-52ca-4d56-a2c5-69711039e59d

Microsoft .NET Framework 4
http://www.microsoft.com/downloads/details.aspx?familyid=770e7b58-6544-4f59-9893-b3eadf6d6c8a

 

Windows Vista Service Pack 2

 

Microsoft .NET Framework 1.1 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=6100e577-deb5-4395-b851-e19e0ca79507

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=7c27128d-eaf9-4416-b8b1-9edab9102feb

Microsoft .NET Framework 4
http://www.microsoft.com/downloads/details.aspx?familyid=770e7b58-6544-4f59-9893-b3eadf6d6c8a

 

Windows Vista x64 Edition Service Pack 2

 

Microsoft .NET Framework 1.1 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=6100e577-deb5-4395-b851-e19e0ca79507

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=7c27128d-eaf9-4416-b8b1-9edab9102feb

Microsoft .NET Framework 4
http://www.microsoft.com/downloads/details.aspx?familyid=770e7b58-6544-4f59-9893-b3eadf6d6c8a

 

Windows Server 2008 for 32-bit Systems Service Pack 2

 

Microsoft .NET Framework 1.1 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=6100e577-deb5-4395-b851-e19e0ca79507

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=7c27128d-eaf9-4416-b8b1-9edab9102feb

Microsoft .NET Framework 4
http://www.microsoft.com/downloads/details.aspx?familyid=770e7b58-6544-4f59-9893-b3eadf6d6c8a

 

Windows Server 2008 for x64-based Systems Service Pack 2

Microsoft .NET Framework 1.1 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=6100e577-deb5-4395-b851-e19e0ca79507

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=7c27128d-eaf9-4416-b8b1-9edab9102feb

Microsoft .NET Framework 4
http://www.microsoft.com/downloads/details.aspx?familyid=770e7b58-6544-4f59-9893-b3eadf6d6c8a

 

Windows Server 2008 for Itanium-based Systems Service Pack 2

Microsoft .NET Framework 1.1 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=6100e577-deb5-4395-b851-e19e0ca79507

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=7c27128d-eaf9-4416-b8b1-9edab9102feb

Microsoft .NET Framework 4
http://www.microsoft.com/downloads/details.aspx?familyid=770e7b58-6544-4f59-9893-b3eadf6d6c8a

 

Windows 7 for 32-bit Systems


Microsoft .NET Framework 3.5.1
http://www.microsoft.com/downloads/details.aspx?familyid=81be7ff1-3ba2-430c-9edf-619cc246daf2

Microsoft .NET Framework 4
http://www.microsoft.com/downloads/details.aspx?familyid=770e7b58-6544-4f59-9893-b3eadf6d6c8a

 

Windows 7 for 32-bit Systems Service Pack 1

 

Microsoft .NET Framework 3.5.1
http://www.microsoft.com/downloads/details.aspx?familyid=98403988-7438-4260-95b5-a4796dbe0618

Microsoft .NET Framework 4
http://www.microsoft.com/downloads/details.aspx?familyid=770e7b58-6544-4f59-9893-b3eadf6d6c8a

 

Windows 7 for x64-based Systems

 

Microsoft .NET Framework 3.5.1
http://www.microsoft.com/downloads/details.aspx?familyid=81be7ff1-3ba2-430c-9edf-619cc246daf2

Microsoft .NET Framework 4
http://www.microsoft.com/downloads/details.aspx?familyid=770e7b58-6544-4f59-9893-b3eadf6d6c8a

 

Windows 7 for x64-based Systems Service Pack 1

 

Microsoft .NET Framework 3.5.1
http://www.microsoft.com/downloads/details.aspx?familyid=98403988-7438-4260-95b5-a4796dbe0618

Microsoft .NET Framework 4
http://www.microsoft.com/downloads/details.aspx?familyid=770e7b58-6544-4f59-9893-b3eadf6d6c8a

 

Windows Server 2008 R2 for x64-based Systems


Microsoft .NET Framework 3.5.1
http://www.microsoft.com/downloads/details.aspx?familyid=81be7ff1-3ba2-430c-9edf-619cc246daf2

Microsoft .NET Framework 4
http://www.microsoft.com/downloads/details.aspx?familyid=770e7b58-6544-4f59-9893-b3eadf6d6c8a

 

Windows Server 2008 R2 for x64-based Systems Service Pack 1

 

Microsoft .NET Framework 3.5.1
http://www.microsoft.com/downloads/details.aspx?familyid=98403988-7438-4260-95b5-a4796dbe0618

Microsoft .NET Framework 4
http://www.microsoft.com/downloads/details.aspx?familyid=770e7b58-6544-4f59-9893-b3eadf6d6c8a

 

Windows Server 2008 R2 for Itanium-based Systems

 

Microsoft .NET Framework 3.5.1
http://www.microsoft.com/downloads/details.aspx?familyid=81be7ff1-3ba2-430c-9edf-619cc246daf2

Microsoft .NET Framework 4
http://www.microsoft.com/downloads/details.aspx?familyid=770e7b58-6544-4f59-9893-b3eadf6d6c8a

 

Windows Server 2008 R2 for Itanium-based Systems Service Pack 1

 

Microsoft .NET Framework 3.5.1
http://www.microsoft.com/downloads/details.aspx?familyid=98403988-7438-4260-95b5-a4796dbe0618

Ссылки: MS11-078: Vulnerability in .NET Framework and Microsoft Silverlight Could Allow Remote Code Execution (2604930)