[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247974

 
 

909

 
 

194654

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Microsoft Paint Integer Overflow Remote Code Execution Vulnerability - MS10-005

ID: oval:org.secpod.oval:def:1567Date: (C)2011-07-27   (M)2022-04-14
Class: PATCHFamily: windows




The host is missing a critical security update according to Microsoft security bulletin, MS10-005. The update is required to fix integer overflow vulnerability. A flaw is present in the Paint in Microsoft Windows, which fails to validate crafted JPEG (.JPG) file. Successful exploitation could allow an attacker to execute arbitrary code on the system.

Platform:
Microsoft Windows XP
Microsoft Windows Server 2003
Reference:
MS10-005
CVE-2010-0028
CVE    1
CVE-2010-0028
CPE    9
cpe:/o:microsoft:windows_xp::sp3:x86
cpe:/o:microsoft:windows_2000::sp4
cpe:/o:microsoft:windows_xp::sp3
cpe:/o:microsoft:windows_xp::sp2
...
XCCDF    3
xccdf_com.secpod_benchmark_microsoft-windows-server-2003
xccdf_com.secpod_benchmark_microsoft-windows-xp
xccdf_scaprepo.com_benchmark_microsoft-windows-server-2003

© SecPod Technologies