CERTA-2011-AVI-212

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité permettant d'exécuter du code arbitraire à distance a été corrigée dans Microsoft Windows GDI+.

Description

Une vulnérabilité a été corrigée dans Microsoft Windows GDI+. Elle peut être utilisée par une personne malveillante distante pour provoquer de l'exécution de code arbitaire à l'aide d'une image spécialement conçue.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Microsoft Windows Windows XP SP 3 ;
Microsoft Windows Windows Server 2008 Itanium et Windows Server 2008 Itanium SP 2.
Microsoft Windows Windows Server 2003 SP 2 Itanium ;
Microsoft Windows Windows Server 2008 32 bits et Windows Server 2008 32 bits SP 2 ;
Microsoft Windows Windows Vista SP 1 et Windows Vista SP 2 ;
Microsoft Windows Windows XP Pro x64 SP 3 ;
Microsoft Windows Windows Server 2003 SP 2 ;
Microsoft Windows Windows Server 2008 x64 et Windows Server 2008 x64 SP 2 ;
Microsoft Windows Windows Server 2003 x64 SP 2 ;
Microsoft Windows Windows Vista x64 SP 1 et Windows Vista x64 SP 2 ;
References

Show details on source website
To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Windows XP SP 3 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 Itanium et Windows Server 2008 Itanium SP 2.",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2003 SP 2 Itanium ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 32 bits et Windows Server 2008 32 bits SP 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Vista SP 1 et Windows Vista SP 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows XP Pro x64 SP 3 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2003 SP 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 x64 et Windows Server 2008 x64 SP 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2003 x64 SP 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Vista x64 SP 1 et Windows Vista x64 SP 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans Microsoft Windows GDI+. Elle peut\n\u00eatre utilis\u00e9e par une personne malveillante distante pour provoquer de\nl\u0027ex\u00e9cution de code arbitaire \u00e0 l\u0027aide d\u0027une image sp\u00e9cialement con\u00e7ue.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2011-0041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-0041"
    }
  ],
  "links": [],
  "reference": "CERTA-2011-AVI-212",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2011-04-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 permettant d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance a\n\u00e9t\u00e9 corrig\u00e9e dans \u003cspan class=\"textit\"\u003eMicrosoft Windows GDI+\u003c/span\u003e.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Microsoft Windows GDI+",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS11-029 du 12 avril 2011",
      "url": "http://www.microsoft.com/technet/security/Bulletin/MS11-029.mspx"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.