CERTA-2003-AVI-106
Vulnerability from certfr_avis
Une vulnérabilité est présente dans l'Utility Manager de Windows 2000.
Description
Microsoft Windows 2000 possède des fonctionnalités permettant de simplifier l'utilisation du système d'exploitation (telle que Windows Narrator, un système de synthèse vocale) et pouvant être démarrées par l'Utility Manager.
Une mauvaise gestion des erreurs lors de l'envoi de messages Windows à l'Utility Manager permet à un individu mal intentionné d'éléver ses privilgèges.
Solution
Appliquer le correctif fourni par Microsoft (cf. Documentation).
NoneReferences
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Windows 2000.",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nMicrosoft Windows 2000 poss\u00e8de des fonctionnalit\u00e9s permettant de\nsimplifier l\u0027utilisation du syst\u00e8me d\u0027exploitation (telle que Windows\nNarrator, un syst\u00e8me de synth\u00e8se vocale) et pouvant \u00eatre d\u00e9marr\u00e9es par\nl\u0027Utility Manager.\n\nUne mauvaise gestion des erreurs lors de l\u0027envoi de messages Windows \u00e0\nl\u0027Utility Manager permet \u00e0 un individu mal intentionn\u00e9 d\u0027\u00e9l\u00e9ver ses\nprivilg\u00e8ges.\n\n## Solution\n\nAppliquer le correctif fourni par Microsoft (cf. Documentation).\n",
"cves": [],
"initial_release_date": "2003-07-10T00:00:00",
"last_revision_date": "2003-07-10T00:00:00",
"links": [],
"reference": "CERTA-2003-AVI-106",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2003-07-10T00:00:00.000000"
}
],
"risks": [
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 est pr\u00e9sente dans l\u0027Utility Manager de Windows 2000.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans Utility Manager sous Windows",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 #MS03-025 de Microsoft",
"url": "http://www.microsoft.com/security/security_bulletins/ms03-025.asp"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…