CERTA-2003-AVI-106

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité est présente dans l'Utility Manager de Windows 2000.

Description

Microsoft Windows 2000 possède des fonctionnalités permettant de simplifier l'utilisation du système d'exploitation (telle que Windows Narrator, un système de synthèse vocale) et pouvant être démarrées par l'Utility Manager.

Une mauvaise gestion des erreurs lors de l'envoi de messages Windows à l'Utility Manager permet à un individu mal intentionné d'éléver ses privilgèges.

Solution

Appliquer le correctif fourni par Microsoft (cf. Documentation).

None
Impacted products
Vendor Product Description
Microsoft Windows Windows 2000.
References

Show details on source website

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Windows 2000.",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nMicrosoft Windows 2000 poss\u00e8de des fonctionnalit\u00e9s permettant de\nsimplifier l\u0027utilisation du syst\u00e8me d\u0027exploitation (telle que Windows\nNarrator, un syst\u00e8me de synth\u00e8se vocale) et pouvant \u00eatre d\u00e9marr\u00e9es par\nl\u0027Utility Manager.\n\nUne mauvaise gestion des erreurs lors de l\u0027envoi de messages Windows \u00e0\nl\u0027Utility Manager permet \u00e0 un individu mal intentionn\u00e9 d\u0027\u00e9l\u00e9ver ses\nprivilg\u00e8ges.\n\n## Solution\n\nAppliquer le correctif fourni par Microsoft (cf. Documentation).\n",
  "cves": [],
  "links": [],
  "reference": "CERTA-2003-AVI-106",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2003-07-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 est pr\u00e9sente dans l\u0027Utility Manager de Windows 2000.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Utility Manager sous Windows",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 #MS03-025 de Microsoft",
      "url": "http://www.microsoft.com/security/security_bulletins/ms03-025.asp"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…