MS11-024: Vulnerability in Windows Fax Cover Page Editor Could Allow Remote Code Execution (2527308)

NASLDB: MS11-024: Vulnerability in Windows Fax Cover Page Editor Could Allow Remote Code Execution (2527308)

General

ID: 53381
Name: MS11-024: Vulnerability in Windows Fax Cover Page Editor Could Allow Remote Code Execution (2527308)

Summary: Checks version of fax cover page editor

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS Temporal Vector: CVSS2#E:POC/RL:U/RC:C

Port: 139
Family: Windows : Microsoft Bulletins
Type: Local

Description

The version of Windows Fax Cover Page Editor on the remote host has a
heap buffer overflow vulnerability. A remote attacker could exploit
this by tricking a user into opening a specially crafted fax cover
page file, resulting in arbitrary code execution.

Exploiting

Exploit Available: True
Exploitability Ease: Exploits are available

Sources

CVE: CVE-2010-3974
OSVDB: –
Bugtraq: 45942
scipID: –

Timeline

Vulnerability Disclosure: 2010/12/26
Patch Release: 2011/04/12
Plugin Release: 2011/04/13

Plugin

Version: 1.12
Filename: smb_nt_ms11-024.nasl
Filesize: 6057 bytes
MD5 Hash: c72fc9ab1b1cd783ace2729cc537961a

Identification: Host/patch_management_checks
Require Keys: SMB/MS_Bulletin_Checks/Possible
Dependencies: "smb_hotfixes.nasl", "ms_bulletin_checks_possible.nasl"