스톰캐스트 : CVE-2010-0027

전세계

한국

한국 해킹 유형 통계

CVE-2010-0027
기본정보	공개일 : 2010-01-23 변경일 : 2010-08-21
CVSS 평가	위험도: 9.3 액세스 벡터 : NETWORK 액세스 복잡성 : 보통 인증 : 없음 기밀성 영향 : 전체 무결성 영향 : 전체 가용성 영향 : 전체 출처 : http://nvd.nist.gov 공개일 : 2010-01-25
설명	The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, does not properly process input parameters, which allows remote attackers to execute arbitrary local programs via a crafted URL, aka "URL Validation Vulnerability."
참조	CERT, TA10-040A MS, MS10-007 MS, MS10-002 XF, ie-url-code-execution(55773) MISC, http://www.zerodayinitiative.com/advisories/ZDI-10-016/ BUGTRAQ, 20100209 ZDI-10-016: Microsoft Windows ShellExecute Improper Sanitiza..
취약 소프트웨어	microsoft windows_2003_server microsoft windows_xp microsoft ie 6 microsoft windows_server_2008 x64 microsoft windows_server_2008 x64 microsoft windows_vista x64 microsoft windows_vista x64 microsoft ie 7.0 microsoft ie 5.01 microsoft ie 7.00.5730.1100 microsoft windows_vista microsoft windows_xp - x64 microsoft ie 7.0.5730 gold microsoft ie 8 microsoft ie 7 microsoft windows_server_2003 itanium microsoft ie 7.00.6000.16441 microsoft windows_server_2008 x32 microsoft ie 7.00.6000.16386 microsoft windows_vista x64 microsoft ie 6 microsoft ie 7.0.5730.11 microsoft windows_server_2008 x32 microsoft windows_vista microsoft windows_xp microsoft windows_2003_server itanium microsoft windows_server_2008 x64 microsoft windows_2000 microsoft windows_server_2003 x64 microsoft windows_7 - x32 microsoft windows_vista microsoft windows_7 - x64 microsoft windows_server_2008 itanium microsoft ie 8.0.6001