CVE-2006-4446
- 特征库ID:
29536
- 漏洞级别:
high
- CVE ID:
CVE-2006-4446
- 建议的动作:
drop
- 受影响的系统:
Windows
- 协议:
攻击漏洞描述
这表明攻击企图利用 Microsoft Internet Explorer 中的堆缓冲区溢出漏洞。该漏洞位于“daxctle.ocx”ActiveX 控件中,可通过滥用“Spline”方法来利用。它可能允许远程攻击者使用受影响的 ActiveX 控件在应用程序上下文中执行任意代码。失败的利用尝试可能会导致程序崩溃,从而导致拒绝服务情况。
影响范围
Nortel Networks Self-Service Speech Server
Nortel Networks Self-Service Peri NT Server
Nortel Networks Self-Service Peri IVR
Nortel Networks Self-Service Peri Application
Nortel Networks Self-Service MPS 500
Nortel Networks Self-Service MPS 1000
Nortel Networks Self-Service MPS 100
Nortel Networks Multimedia Comm MCS5200
Nortel Networks Multimedia Comm MCS5100
Nortel Networks Enterprise VoIP TM-CS1000
Nortel Networks Contact Center Manager Server
Nortel Networks Contact Center Express
Nortel Networks Contact Center Administration
Nortel Networks CallPilot 703t
Nortel Networks CallPilot 702t
Nortel Networks CallPilot 201i
Nortel Networks CallPilot 200i
Nortel Networks CallPilot 1002rp
Microsoft Windows XP Tablet PC Edition SP2
Microsoft Windows XP Tablet PC Edition SP1
Microsoft Windows XP Tablet PC Edition
Microsoft Windows XP Professional x64 Edition
Microsoft Windows XP Professional SP2
Microsoft Windows XP Professional SP1
Microsoft Windows XP Professional
Microsoft Windows XP Media Center Edition SP2
Microsoft Windows XP Media Center Edition SP1
Microsoft Windows XP Media Center Edition
Microsoft Windows XP Home SP2
Microsoft Windows XP Home SP1
Microsoft Windows XP Home
Microsoft Windows XP 64-bit Edition Version 2003 SP1
Microsoft Windows XP 64-bit Edition Version 2003
Microsoft Windows XP 64-bit Edition SP1
Microsoft Windows XP 64-bit Edition
Microsoft Windows XP
Microsoft Windows Server 2003 Web Edition SP1 Beta 1
Microsoft Windows Server 2003 Web Edition SP1
Microsoft Windows Server 2003 Web Edition
Microsoft Windows Server 2003 Standard x64 Edition
Microsoft Windows Server 2003 Standard Edition SP1 Beta 1
Microsoft Windows Server 2003 Standard Edition SP1
Microsoft Windows Server 2003 Standard Edition
Microsoft Windows Server 2003 Enterprise x64 Edition
Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Beta 1
Microsoft Windows Server 2003 Enterprise Edition Itanium SP1
Microsoft Windows Server 2003 Enterprise Edition Itanium
Microsoft Windows Server 2003 Enterprise Edition SP1 Beta 1
Microsoft Windows Server 2003 Enterprise Edition SP1
Microsoft Windows Server 2003 Enterprise Edition
Microsoft Windows Server 2003 Datacenter x64 Edition
Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Beta 1
Microsoft Windows Server 2003 Datacenter Edition Itanium SP1
Microsoft Windows Server 2003 Datacenter Edition Itanium
Microsoft Windows Server 2003 Datacenter Edition SP1 Beta 1
Microsoft Windows Server 2003 Datacenter Edition SP1
Microsoft Windows Server 2003 Datacenter Edition
Microsoft Windows 2000 Server Japanese Edition
Microsoft Windows 2000 Server SP4
Microsoft Windows 2000 Server SP3
Microsoft Windows 2000 Server SP2
Microsoft Windows 2000 Server SP1
Microsoft Windows 2000 Server
+ Avaya DefinityOne Media Servers
+ Avaya IP600 Media Servers
+ Avaya S3400 Message Application Server
+ Avaya S8100 Media Servers
Microsoft Windows 2000 Professional SP4
Microsoft Windows 2000 Professional SP3
Microsoft Windows 2000 Professional SP2
Microsoft Windows 2000 Professional SP1
Microsoft Windows 2000 Professional
Microsoft Windows 2000 Datacenter Server SP4
Microsoft Windows 2000 Datacenter Server SP3
Microsoft Windows 2000 Datacenter Server SP2
Microsoft Windows 2000 Datacenter Server SP1
Microsoft Windows 2000 Datacenter Server
Microsoft Windows 2000 Advanced Server SP4
Microsoft Windows 2000 Advanced Server SP3
Microsoft Windows 2000 Advanced Server SP2
Microsoft Windows 2000 Advanced Server SP1
Microsoft Windows 2000 Advanced Server
Microsoft Internet Explorer 5.0.1 SP4
Microsoft Internet Explorer 5.0.1 SP3
Microsoft Internet Explorer 5.0.1 SP2
Microsoft Internet Explorer 5.0.1 SP1
Microsoft Internet Explorer 5.0.1
Microsoft Internet Explorer 6.0 SP1
Microsoft Internet Explorer 6.0
HP Storage Management Appliance 2.1
+ HP Storage Management Appliance III
+ HP Storage Management Appliance II
+ HP Storage Management Appliance I
Avaya S8100 Media Servers R9
Avaya S8100 Media Servers R8
Avaya S8100 Media Servers R7
Avaya S8100 Media Servers R6
Avaya S8100 Media Servers R12
Avaya S8100 Media Servers R11
Avaya S8100 Media Servers R10
Avaya S8100 Media Servers
Avaya Messaging Application Server
可能带来的后果
系统被入侵:远程攻击者可以控制易受攻击的系统。拒绝服务:远程攻击者可以使易受攻击的系统崩溃。
解决办法
应用供应商的最新更新。 Microsoft Windows Server 2003 数据中心版 SP1 Microsoft WindowsServer2003-KB922760-x86-ENU.exe http://www.microsoft.com/downloads/details.aspx?familyid=35EEF49C-E3D7-41EE-82F5-964A3959D453&displaylang=en />Microsoft Windows Server 2003 数据中心版 Itanium SP1 Beta 1 Microsoft WindowsServer2003-KB922760-ia64-ENU.exe http://www.microsoft.com/downloads/details.aspx?familyid=E8E03176-F93B-4DE7-AC95-01F9B1C5409C&displaylang=en />Microsoft Windows Server 2003 企业版 Itanium SP1 Microsoft WindowsServer2003-KB922760-ia64-ENU.exe http://www.microsoft.com/downloads/details.aspx?familyid=E8E03176-F93B-4DE7-AC95-01F9B1C5409C&displaylang=en />Microsoft Windows XP 平板电脑版 SP2 Microsoft WindowsXP-KB922760-x86-ENU.exe http://www.microsoft.com/downloads/details.aspx?familyid=EA3CE61C-3A28-4777-9EEF-1486BB483C4F&displaylang=en />Microsoft Windows Server 2003企业版 Itanium 0 Microsoft WindowsServer2003-KB922760-ia64-ENU.exe http://www.microsoft.com/downloa ds/details.aspx?familyid=E8E03176-F93B-4DE7-AC95-01F9B1C5409C&displaylang=en />Microsoft Windows Server 2003 标准版 SP1 Microsoft WindowsServer2003-KB922760-x86-ENU.exe http://www.microsoft.com/downloads/ details.aspx?familyid=35EEF49C-E3D7-41EE-82F5-964A3959D453&displaylang=en />Microsoft Internet Explorer 6.0 SP1 Microsoft IE6.0sp1-KB922760-Windows2000-x86-ENU.exe http://www.microsoft.com/downloads/ details.aspx?familyid=C65C8EE7-F78D-4D52-A20C-1F896E0DC0A8&displaylang=en />Microsoft Windows Server 2003 标准版 Microsoft WindowsServer2003-KB922760-x86-ENU.exe http://www.microsoft.com/downloads/details.aspx ?familyid=35EEF49C-E3D7-41EE-82F5-964A3959D453&displaylang=en />Microsoft Windows Server 2003 Enterprise x64 Edition Microsoft WindowsServer2003.WindowsXP-KB922760-x64-ENU.exe http://www.microsoft.com/downloads/details.aspx ?familyid=ABE4FE3E-BDB6-44B1-B203-528C67980B8F&displaylang=en />Microsoft Windows Server 2003 Datacenter Edition Itanium 0 Microsoft WindowsServe r2003-KB922760-ia64-ENU.exe http://www.microsoft.com/downloads/details.aspx?familyid=E8E03176-F93B-4DE7-AC95-01F9B1C5409C&displaylang=en />Microsoft WindowsServer2003-KB922760-x86-ENU.exe http://www.microsoft.com/downloads/details.aspx?familyid=35EEF49C-E3D7-41EE-82F5-964A3959D453&displaylang=en />Microsoft Windows Server 2003 Datacenter x64 Edition Microsoft WindowsServer2003.WindowsXP-KB922760-x64-ENU.exe http://www.microsoft.com/downloads/details.aspx?familyid=ABE4FE3E-BDB6-44B1-B203-528C67980B8F&displaylang=en />Microsoft Windows Server 2003 Enterprise Edition SP1 Microsoft WindowsServer2003-KB922760-x86-ENU.exe http: //www.microsoft.com/downloads/details.aspx?familyid=35EEF49C-E3D7-41EE-82F5-964A3959D453&displaylang=en />Microsoft Windows XP 64 位版 SP1 Microsoft WindowsServer2003.WindowsXP-KB922760-x64-ENU.exe http ://www.microsoft.com/downloads/details.aspx?familyid=C535A36F-705E-4663-9EE4-B82632A50F0A&displaylang=en />Microsoft Windows Server 2003 Datacenter Edition Micros经常 WindowsServer2003-KB922760-x86-ENU.exe http://www.microsoft.com/downloads/details.aspx?familyid=35EEF49C-E3D7-41EE-82F5-964A3959D453&displaylang=en />Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Beta 1 Microsoft WindowsServer2003-KB922760-ia64-ENU.exe http://www.microsoft.com/downloads/details.aspx?familyid=E8E03176-F93B-4DE7-AC95-01F9B1C5409C&displaylang=en />Microsoft Windows Server 2003 企业版 Microsoft WindowsServer2003 -KB922760-x86-ENU.exe http://www.microsoft.com/downloads/details.aspx?familyid=35EEF49C-E3D7-41EE-82F5-964A3959D453&displaylang=en />Microsoft Windows XP Home SP2 Microsoft WindowsXP-KB922760-x86 -ENU.exe http://www.microsoft.com/downloads/details.aspx?familyid=EA3CE61C-3A28-4777-9EEF-1486BB483C4F&displaylang=en />Microsoft Windows Server 2003 网络版 Microsoft WindowsServer2003-KB922760-x86-ENU。 exe http://www.microsoft.com/downloads/details.aspx?familyid=35EEF49C-E3D7-41EE-82F5-964A3959D453&displaylang=en />Microsoft Windows 服务器2003 网络版 SP1 Microsoft WindowsServer2003-KB922760-x86-ENU.exe http://www.microsoft.com/downloads/details.aspx?familyid=35EEF49C-E3D7-41EE-82F5-964A3959D453&displaylang=en />Microsoft Windows XP 64-位版本 2003 SP1 Microsoft WindowsServer2003.WindowsXP-KB922760-x64-ENU.exe http://www.microsoft.com/downloads/details.aspx?familyid=C535A36F-705E-4663-9EE4-B82632A50F0A&displaylang=en />Microsoft Windows XP 64 位版 版本 2003 Microsoft WindowsServer2003.WindowsXP-KB922760-x64-ENU.exe http://www.microsoft.com/downloads/details.aspx?familyid=C535A36F-705E-4663-9EE4-B82632A50F0A&displaylang=en /> Microsoft Internet Explorer 5.0.1 SP4 Microsoft IE5.01sp4-KB922760-Windows2000sp4-x86-ENU.exe http://www.microsoft.com/downloads/details.aspx?familyid=B743B081-20D4-4C1C-BC86-254D2F653953&displaylang=en