certfr_avis - certa-2008-avi-194

CERTA-2008-AVI-194

Vulnerability from certfr_avis

Une vulnérabilité a été identifiée dans un contrôle ActiveX de Microsoft Windows. L'exploitation de cette dernière, par le biais d'une page Web spécialement construite par exemple, peut provoquer l'exécution de code arbitraire sur le système vulnérable ayant visité la page.

Description

Une vulnérabilité a été identifiée dans un contrôle ActiveX hxvz.dll de Microsoft Windows. Ce contrôle ActiveX est associé à l'application Yahoo! Music Jukebox.

L'exploitation de cette vulnérabilité, par le biais d'une page Web spécialement construite par exemple, peut provoquer l'exécution de code arbitraire sur le système vulnérable ayant visité la page.

Internet Explorer 7 ne serait pas affecté. Cependant, si le contrôle ActiveX a été utilisé dans des versions précédentes du navigateur sur le même système, celui-ci est activé et fonctionnel dans Internet Explorer 7, même si le client ne l'a pas approuvé explicitement à l'aide de la fonctionnalité « ActiveX Opt-in ».

Solution

Se référer au bulletin de sécurité MS08-023 de Microsoft pour l'obtention des correctifs (cf. section Documentation).

Microsoft Windows 2000 Service Pack 4 ;
Microsoft Windows XP Service Pack 2 ;
Microsoft Windows XP Professionnel Édition x64 ;
Microsoft Windows XP Professionnel Édition x64 Service Pack 2 ;
Microsoft Windows Server 2003 Service Pack 1 ;
Microsoft Windows Server 2003 Service Pack 2 ;
Microsoft Windows Server 2003 Édition x64 ;
Microsoft Windows Server 2003 Édition x64 Service Pack 2 ;
Microsoft Windows Server 2003 avec SP1 pour les systèmes Itanium ;
Microsoft Windows Server 2003 avec SP2 pour les systèmes Itanium ;
Microsoft Windows Vista ;
Microsoft Windows Vista Service Pack 1 ;
Microsoft Windows Vista Édition x64 ;
Microsoft Windows Vista Édition x64 Service Pack 1 ;
Microsoft Windows Server 2008 pour systèmes 32 bits ;
Microsoft Windows Server 2008 pour systèmes x64 ;
Microsoft Windows Server 2008 pour systèmes Itanium.

Il s'agit en particulier des versions Internet Explorer 5.01 Service Pack 4 et Internet Explorer 6 Service Pack 1.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft MS08-023 du 08 avril 2008

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cUL\u003e    \u003cLI\u003eMicrosoft Windows 2000 Service Pack 4 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows XP Service Pack 2 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows XP Professionnel \u00c9dition x64 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows XP Professionnel \u00c9dition x64 Service Pack    2 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows Server 2003 Service Pack 1 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows Server 2003 Service Pack 2 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows Server 2003 \u00c9dition x64 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows Server 2003 \u00c9dition x64 Service Pack 2    ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows Server 2003 avec SP1 pour les syst\u00e8mes    Itanium ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows Server 2003 avec SP2 pour les syst\u00e8mes    Itanium ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows Vista ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows Vista Service Pack 1 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows Vista \u00c9dition x64 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows Vista \u00c9dition x64 Service Pack 1 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows Server 2008 pour syst\u00e8mes 32 bits ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows Server 2008 pour syst\u00e8mes x64 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows Server 2008 pour syst\u00e8mes Itanium.\u003c/LI\u003e  \u003c/UL\u003e  \u003cP\u003eIl s\u0027agit en particulier des versions Internet Explorer 5.01  Service Pack 4 et Internet Explorer 6 Service Pack 1.\u003c/P\u003e",
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 identifi\u00e9e dans un contr\u00f4le ActiveX hxvz.dll de\nMicrosoft Windows. Ce contr\u00f4le ActiveX est associ\u00e9 \u00e0 l\u0027application\nYahoo! Music Jukebox.\n\nL\u0027exploitation de cette vuln\u00e9rabilit\u00e9, par le biais d\u0027une page Web\nsp\u00e9cialement construite par exemple, peut provoquer l\u0027ex\u00e9cution de code\narbitraire sur le syst\u00e8me vuln\u00e9rable ayant visit\u00e9 la page.\n\nInternet Explorer 7 ne serait pas affect\u00e9. Cependant, si le contr\u00f4le\nActiveX a \u00e9t\u00e9 utilis\u00e9 dans des versions pr\u00e9c\u00e9dentes du navigateur sur le\nm\u00eame syst\u00e8me, celui-ci est activ\u00e9 et fonctionnel dans Internet Explorer\n7, m\u00eame si le client ne l\u0027a pas approuv\u00e9 explicitement \u00e0 l\u0027aide de la\nfonctionnalit\u00e9 \u00ab ActiveX Opt-in \u00bb.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 MS08-023 de Microsoft pour\nl\u0027obtention des correctifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2008-1086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-1086"
    }
  ],
  "initial_release_date": "2008-04-09T00:00:00",
  "last_revision_date": "2008-04-09T00:00:00",
  "links": [],
  "reference": "CERTA-2008-AVI-194",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2008-04-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 identifi\u00e9e dans un contr\u00f4le ActiveX de Microsoft\nWindows. L\u0027exploitation de cette derni\u00e8re, par le biais d\u0027une page Web\nsp\u00e9cialement construite par exemple, peut provoquer l\u0027ex\u00e9cution de code\narbitraire sur le syst\u00e8me vuln\u00e9rable ayant visit\u00e9 la page.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans un contr\u00f4le ActiveX de Microsoft Windows",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS08-023 du 08 avril 2008",
      "url": "http://www.microsoft.com/technet/security/Bulletin/MS08-023.mspx"
    }
  ]
}

CVE-2008-1086 (GCVE-0-2008-1086)

Vulnerability from cvelistv5

Published

2008-04-08 23:00

Modified

2024-08-07 08:08

Severity ?

CWE

Summary

The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, which triggers memory corruption.

References

URL

Tags

	http://www.us-cert.gov/cas/techalerts/TA08-099A.html	third-party-advisory, x_refsource_CERT
	http://marc.info/?l=bugtraq&m=120845064910729&w=2	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5475	vdb-entry, signature, x_refsource_OVAL
	http://marc.info/?l=bugtraq&m=120845064910729&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/29714	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1019800	vdb-entry, x_refsource_SECTRACK
	https://exchange.xforce.ibmcloud.com/vulnerabilities/41464	vdb-entry, x_refsource_XF
	http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=680	third-party-advisory, x_refsource_IDEFENSE
	http://www.vupen.com/english/advisories/2008/1147/references	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/bid/28606	vdb-entry, x_refsource_BID
	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-023	vendor-advisory, x_refsource_MS

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T08:08:57.612Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "TA08-099A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-099A.html"
          },
          {
            "name": "SSRT080048",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=120845064910729\u0026w=2"
          },
          {
            "name": "oval:org.mitre.oval:def:5475",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5475"
          },
          {
            "name": "HPSBST02329",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=120845064910729\u0026w=2"
          },
          {
            "name": "29714",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29714"
          },
          {
            "name": "1019800",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1019800"
          },
          {
            "name": "ie-hxvz-code-execution(41464)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41464"
          },
          {
            "name": "20080408 Microsoft HxTocCtrl ActiveX Control Invalid Param Heap Corruption Vulnerability",
            "tags": [
              "third-party-advisory",
              "x_refsource_IDEFENSE",
              "x_transferred"
            ],
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=680"
          },
          {
            "name": "ADV-2008-1147",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1147/references"
          },
          {
            "name": "28606",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/28606"
          },
          {
            "name": "MS08-023",
            "tags": [
              "vendor-advisory",
              "x_refsource_MS",
              "x_transferred"
            ],
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-023"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-04-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, which triggers memory corruption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-12T19:57:01",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "TA08-099A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-099A.html"
        },
        {
          "name": "SSRT080048",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=120845064910729\u0026w=2"
        },
        {
          "name": "oval:org.mitre.oval:def:5475",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5475"
        },
        {
          "name": "HPSBST02329",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=120845064910729\u0026w=2"
        },
        {
          "name": "29714",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29714"
        },
        {
          "name": "1019800",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1019800"
        },
        {
          "name": "ie-hxvz-code-execution(41464)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41464"
        },
        {
          "name": "20080408 Microsoft HxTocCtrl ActiveX Control Invalid Param Heap Corruption Vulnerability",
          "tags": [
            "third-party-advisory",
            "x_refsource_IDEFENSE"
          ],
          "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=680"
        },
        {
          "name": "ADV-2008-1147",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1147/references"
        },
        {
          "name": "28606",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/28606"
        },
        {
          "name": "MS08-023",
          "tags": [
            "vendor-advisory",
            "x_refsource_MS"
          ],
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-023"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "ID": "CVE-2008-1086",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, which triggers memory corruption."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "TA08-099A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-099A.html"
            },
            {
              "name": "SSRT080048",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=120845064910729\u0026w=2"
            },
            {
              "name": "oval:org.mitre.oval:def:5475",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5475"
            },
            {
              "name": "HPSBST02329",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=120845064910729\u0026w=2"
            },
            {
              "name": "29714",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29714"
            },
            {
              "name": "1019800",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1019800"
            },
            {
              "name": "ie-hxvz-code-execution(41464)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41464"
            },
            {
              "name": "20080408 Microsoft HxTocCtrl ActiveX Control Invalid Param Heap Corruption Vulnerability",
              "refsource": "IDEFENSE",
              "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=680"
            },
            {
              "name": "ADV-2008-1147",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1147/references"
            },
            {
              "name": "28606",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/28606"
            },
            {
              "name": "MS08-023",
              "refsource": "MS",
              "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-023"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2008-1086",
    "datePublished": "2008-04-08T23:00:00",
    "dateReserved": "2008-02-28T00:00:00",
    "dateUpdated": "2024-08-07T08:08:57.612Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CERTA-2008-AVI-194

Vulnerability from certfr_avis

Description

Solution

CVE-2008-1086 (GCVE-0-2008-1086)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature