vendor:
Windows XP
by:
Moti & Xu Hao, Yaniv Miron aka Lament of ilhack, jduck
N/A
CVSS
N/A
Stack Buffer Overflow
119
CWE
Product Name: Windows XP
Affected Version From: Windows XP SP3 English
Affected Version To: Windows XP SP3 English
Patch Exists: YES
Related CWE: CVE-2010-3970
CPE: o:microsoft:windows_xp::sp3
Metasploit:
N/A
Other Scripts:
https://www.infosecmatter.com/nessus-plugin-library/?id=51906, https://www.infosecmatter.com/metasploit-module-library/?mm=exploit/windows/fileformat/ms11_006_createsizeddibsection, https://www.infosecmatter.com/nessus-plugin-library/?id=63402, https://www.infosecmatter.com/list-of-metasploit-windows-exploits-detailed-spreadsheet/
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2011
Microsoft Windows CreateSizedDIBSECTION Stack Buffer Overflow
This module exploits a stack-based buffer overflow in the handling of thumbnails within .MIC files and various Office documents. When processing a thumbnail bitmap containing a negative 'biClrUsed' value, a stack-based buffer overflow occurs. This leads to arbitrary code execution. In order to trigger the vulnerable code, the folder containing the document must be viewed using the 'Thumbnails' view.
Mitigation:
Microsoft Security Bulletin MS11-006
