Bloodhound/Exploit.159
Bloodhound/Exploit.159
identifica un método heurísitico para vulnerabilidades detectadas en el
control múltiple de inyección de comandos URI (Uniform Resource Identifier)
en los navegadores Internet Explorer 6.0, Mozilla Firefox 2.0 3x y
Mozilla Thunderbird 2.0 4, que permitirían ejecución de codigos
arbitarios en forma remota y error de validaciones, al visitar determinados
sitios web con códigos maliciosos.
http://www.securityfocus.com/bid/24837/info
URI es una cadena corta de caracteres que identifica un recurso (servicio, página, documento, dirección de correo electrónico, enciclopedia,
etc), que pueden ser un URL (Uniform Resource Locator)
asociado a nombres de dominio en la World Wide Web, URN
(Uniform Resource Name) o ambos.
Sistemas operativos afectados: Windows
98/Me/NT/2000/XP/Server 2003/Windows Vista
Sistemas afectados:
- Netscape Navigator 9.0
- Mozilla Thunderbird 2.0 4
- Mozilla Firefox 2.0 3
- Mozilla Firefox 2.0 .4
- Mozilla Firefox 2.0 .1
- Mozilla Firefox 2.0.0.3
- Mozilla Firefox 2.0.0.2
- Mozilla Firefox 2.0 RC3
- Mozilla Firefox 2.0 RC2
- Mozilla Firefox 2.0 beta 1
- Mozilla Firefox 2.0
- Microsoft Internet Explorer 6.0 SP1
- Microsoft Internet Explorer 6.0
- Citrix ICA Client for Windows 4.0 SP6a
- Microsoft Windows 2000 Advanced Server SP2
- Microsoft Windows 2000 Advanced Server SP2
- Microsoft Windows 2000 Advanced Server SP1
- Microsoft Windows 2000 Advanced Server SP1
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Datacenter Server SP2
- Microsoft Windows 2000 Datacenter Server SP2
- Microsoft Windows 2000 Datacenter Server SP1
- Microsoft Windows 2000 Datacenter Server SP1
- Microsoft Windows 2000 Datacenter Server
- Microsoft Windows 2000 Datacenter Server
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP1
- Microsoft Windows 2000 Server SP1
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Terminal Services SP2
- Microsoft Windows 2000 Terminal Services SP2
- Microsoft Windows 2000 Terminal Services SP1
- Microsoft Windows 2000 Terminal Services SP1
- Microsoft Windows 2000 Terminal Services
- Microsoft Windows 2000 Terminal Services
- Microsoft Windows 98
- Microsoft Windows 98
- Microsoft Windows 98SE
- Microsoft Windows 98SE
- Microsoft Windows ME
- Microsoft Windows ME
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT Enterprise Server 4.0 SP6a
- Microsoft Windows NT Enterprise Server 4.0 SP6a
- Microsoft Windows NT Server 4.0 SP6a
- Microsoft Windows NT Server 4.0 SP6a
- Microsoft Windows NT Workstation 4.0 SP6a
- Microsoft Windows NT Workstation 4.0 SP6a
+ Microsoft Windows Server 2003 Datacenter Edition
+ Microsoft Windows Server 2003 Datacenter Edition
+ Microsoft Windows Server 2003 Datacenter Edition Itanium
+ Microsoft Windows Server 2003 Enterprise Edition
+ Microsoft Windows Server 2003 Enterprise Edition
+ Microsoft Windows Server 2003 Enterprise Edition Itanium
+ Microsoft Windows Server 2003 Enterprise Edition Itanium
+ Microsoft Windows Server 2003 Standard Edition
+ Microsoft Windows Server 2003 Standard Edition
+ Microsoft Windows Server 2003 Web Edition
+ Microsoft Windows Server 2003 Web Edition
+ Microsoft Windows XP Home
+ Microsoft Windows XP Home
+ Microsoft Windows XP Professional
+ Microsoft Windows XP Professional
- Microsoft Internet Explorer 7.0 beta3
- Microsoft Internet Explorer 7.0 beta2
- Microsoft Internet Explorer 7.0 beta1
- Microsoft Internet Explorer 7.0
+ Microsoft Windows Vista Ultimate
+ Microsoft Windows Vista Ultimate
+ Microsoft Windows Vista Home Premium
+ Microsoft Windows Vista Home Premium
+ Microsoft Windows Vista Home Basic
+ Microsoft Windows Vista Home Basic
+ Microsoft Windows Vista Enterprise
+ Microsoft Windows Vista Enterprise
+ Microsoft Windows Vista Business
+ Microsoft Windows Vista Business
+ Microsoft Windows Vista 0
+ Microsoft Windows Vista 0
+ Microsoft Windows Vista
