|
|
Info |
Last Modified |
| 10 months ago |
|
|
|
|
Description |
Windows contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to drag-and-drop events not properly validating some DHTML events. This may allow an attacker to cause an arbitrary executable file to be downloaded to the victim's computer, to be executed by the user or via other flaws.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
|
|
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability.
|
|
Products |
|
Windows
 |
2000 SP3 |
2000 SP4 |
XP SP1 |
XP SP2 |
XP 64-Bit SP1 |
XP 64-Bit 2003 |
98 |
98 SE |
ME |
Windows Server
|
2003 |
2003 for Itanium |
|
|
|
|
|
|
Credit |
Unknown or Incomplete
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
