NEW Microsoft WMI Administrative Tools ActiveX Control Remote Code Execution Vulnerability
Posted: 22/12/10 by komz in Etiquetas: microsoft, Remote Code Execution Vulnerability, Vulnerabilidades
0
Microsoft WMI Administrative Tools is prone to a remote code-execution vulnerability that affects the WMI Object Viewer ('WBEMSingleView.ocx') ActiveX control.
An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage.
Successful exploits will allow the attacker to execute arbitrary code within the context of the application (typically Internet Explorer) that uses the ActiveX control.
Microsoft WMI Administrative Tools 1.1 is vulnerable; other versions may also be affected.
REFERENCIA.
Desde Vulnerability Team exortamos a los usuarios y administradores revisar las notificaciones y aplicar las actualizaciones necesarias, para
ayudar a mitigar los riesgos.
fuente: securityfocus.com
