Microsoft Windows图形渲染引擎安全漏洞(MS04-032)

漏洞信息详情

Microsoft Windows图形渲染引擎安全漏洞(MS04-032)

• CNNVD编号：CNNVD-200411-005
• 危害等级： 超危
  
  
• CVE编号：
  CVE-2004-0209
  
• 漏洞类型：
  
  
  边界条件错误
  
• 发布时间：
  
  2004-10-12
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  microsoft
• 漏洞来源：
  Patrick Porlan※ po…

Microsoft Windows是一款微软开发的操作系统。
Microsoft Windows对Windows Metafiel和增强Metafile图象格式处理存在问题，远程攻击者可以利用这个漏洞以进程权限在系统上执行任意指令。
攻击者构建恶意WMF或EMF格式图象文件，诱使用户处理，就可能以渲染处理WMF或者EMF图象的应用程序进程权限执行任意指令。目前没有详细漏洞细节提供。

厂商补丁：
Microsoft
———
Microsoft已经为此发布了一个安全公告(MS04-032)以及相应补丁:

MS04-032：Security Update for Microsoft Windows (840987)

链接：http://www.microsoft.com/technet/security/bulletin/MS04-032.mspx” target=”_blank”>
http://www.microsoft.com/technet/security/bulletin/MS04-032.mspx

补丁下载：

Microsoft Windows NT Server 4.0 Service Pack 6a

http://www.microsoft.com/downloads/details.aspx?FamilyId=533AE5CD-74CE-470A-8916-8E358084497C” target=”_blank”>
http://www.microsoft.com/downloads/details.aspx?FamilyId=533AE5CD-74CE-470A-8916-8E358084497C

Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6

http://www.microsoft.com/downloads/details.aspx?FamilyId=3B871A96-5F64-4432-920F-FA5760DF683A” target=”_blank”>
http://www.microsoft.com/downloads/details.aspx?FamilyId=3B871A96-5F64-4432-920F-FA5760DF683A

Microsoft Windows 2000 Service Pack 3 and Microsoft Windows 2000 Service Pack 4

http://www.microsoft.com/downloads/details.aspx?FamilyId=4A614222-BA0B-4927-856D-D443BBBE1A42” target=”_blank”>
http://www.microsoft.com/downloads/details.aspx?FamilyId=4A614222-BA0B-4927-856D-D443BBBE1A42

Microsoft Windows XP and Microsoft Windows XP Service Pack 1

http://www.microsoft.com/downloads/details.aspx?FamilyId=715E985B-7929-4BD5-9564-5CFE7D528398” target=”_blank”>
http://www.microsoft.com/downloads/details.aspx?FamilyId=715E985B-7929-4BD5-9564-5CFE7D528398

Microsoft Windows XP 64-Bit Edition Service Pack 1

http://www.microsoft.com/downloads/details.aspx?FamilyId=99184841-70A8-47C7-9993-44A60E999A40” target=”_blank”>
http://www.microsoft.com/downloads/details.aspx?FamilyId=99184841-70A8-47C7-9993-44A60E999A40

Microsoft Windows XP 64-Bit Edition Version 2003

http://www.microsoft.com/downloads/details.aspx?FamilyId=B4E6BBCF-F5B9-4B2D-8BC4-30911CA4FD9C” target=”_blank”>
http://www.microsoft.com/downloads/details.aspx?FamilyId=B4E6BBCF-F5B9-4B2D-8BC4-30911CA4FD9C

Microsoft Windows Server? 2003

http://www.microsoft.com/downloads/details.aspx?FamilyId=206E9842-997D-45E4-9252-61F3CE5EA66C” target=”_blank”>
http://www.microsoft.com/downloads/details.aspx?FamilyId=206E9842-997D-45E4-9252-61F3CE5EA66C

Microsoft Windows Server 2003 64-Bit Edition

http://www.microsoft.com/downloads/details.aspx?FamilyId=B4E6BBCF-F5B9-4B2D-8BC4-30911CA4FD9C” target=”_blank”>
http://www.microsoft.com/downloads/details.aspx?FamilyId=B4E6BBCF-F5B9-4B2D-8BC4-30911CA4FD9C

来源:US-CERT Vulnerability Note: VU#806278
名称: VU#806278
链接:http://www.kb.cert.org/vuls/id/806278

来源: XF
名称: win-emf-bo(16581)
链接:http://xforce.iss.net/xforce/xfdb/16581

来源: MS
名称: MS04-032
链接:http://www.microsoft.com/technet/security/bulletin/ms04-032.asp

来源: BUGTRAQ
名称: 20041019 [EXPL] (MS04-032) Microsoft Windows XP Metafile (.emf) Heap Overflow
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=109829067325779&w=2

来源: XF
名称: win-ms04032-patch(17658)
链接:http://xforce.iss.net/xforce/xfdb/17658

来源: BID
名称: 11375
链接:http://www.securityfocus.com/bid/11375

来源: US Government Resource: oval:org.mitre.oval:def:2428
名称: oval:org.mitre.oval:def:2428
链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2428

来源: US Government Resource: oval:org.mitre.oval:def:2114
名称: oval:org.mitre.oval:def:2114
链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2114

来源: US Government Resource: oval:org.mitre.oval:def:1872
名称: oval:org.mitre.oval:def:1872
链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1872