Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> Windows : Microsoft Bulletins >> Buffer Overrun in the ListBox and in the ComboBox (824141)


Vulnerability Assessment Details

Buffer Overrun in the ListBox and in the ComboBox (824141)

Vulnerability Assessment Summary
Checks for hotfix Q824141

Detailed Explanation for this Vulnerability Assessment

Summary :

A local user can elevate his rights.

Description :

A vulnerability exists because the ListBox control and the ComboBox control
both call a function, which is located in the User32.dll file, that contains
a buffer overrun. A possible hacker who had the ability to log on to a system
interactively could run a program that could send a specially-crafted Windows
message to any applications that have implemented the ListBox control or the
ComboBox control, causing the application to take any action a possible hacker
specified. A possible hacker must have valid logon credentials to exploit the
vulnerability. This vulnerability could not be exploited remotely.

Solution :

Microsoft has released a set of patches for Windows NT, 2000, XP and 2003 :

http://www.microsoft.com/technet/security/bulletin/ms03-045.mspx

Network Security Threat Level:

Medium / CVSS Base Score : 4
(AV:L/AC:L/Au:R/C:C/A:C/I:C/B:N)

Networks Security ID: 8827

Vulnerability Assessment Copyright: This script is Copyright (C) 2005 Tenable Network Security

Cables, Connectors


Extron RGB-160XI Analog Computer Video 60-378-01 picture

Extron RGB-160XI Analog Computer Video 60-378-01

$187.06



The analog thing modern open source, educational, low-cost analog computer picture

The analog thing modern open source, educational, low-cost analog computer

$800.00



NEW Aquarius+ Mini 8Bit Retro Computer System - Assembled PCB ONLY picture

NEW Aquarius+ Mini 8Bit Retro Computer System - Assembled PCB ONLY

$99.00



IBM Modem Saver Phone Line Tester picture

IBM Modem Saver Phone Line Tester

$7.99



FULLY RECAPPED MACINTOSH CLASSIC II 2 VINTAGE MAC APPLE COMPUTER NEW BATT WORKS picture

FULLY RECAPPED MACINTOSH CLASSIC II 2 VINTAGE MAC APPLE COMPUTER NEW BATT WORKS

$899.00



Landen Computer. Circa 1898. the Rapid Computer Company.  With Original Case. picture

Landen Computer. Circa 1898. the Rapid Computer Company. With Original Case.

$425.00



Apple Macintosh Plus Completely Recapped #M0001A 4MB picture

Apple Macintosh Plus Completely Recapped #M0001A 4MB

$499.00



Macintosh Plus, BlueSCSI, OS 6.x, 4 mb memory - recapped, tested, working. picture

Macintosh Plus, BlueSCSI, OS 6.x, 4 mb memory - recapped, tested, working.

$715.00



Macintosh Classic/Classic II Analog Board Computer 630-0395 New picture

Macintosh Classic/Classic II Analog Board Computer 630-0395 New

$278.00



Analog Computing The #1 Magazine Atari Computer Owners 1985-86 #28 #32 #37 #42 picture

Analog Computing The #1 Magazine Atari Computer Owners 1985-86 #28 #32 #37 #42

$9.99



Discussions

No Discussions have been posted on this vulnerability.