MS08-032: Cumulative Security Update of ActiveX Kill Bits (950760)

medium Nessus Plugin ID 33134

Synopsis

The remote Windows host has an ActiveX control that is affected by multiple memory corruption vulnerabilities.

Description

The remote host contains the sapi.dll ActiveX control.

The version of this control installed on the remote host reportedly contains multiple memory corruption flaws. If an attacker can trick a user on the affected host into visiting a specially crafted web page, he may be able to leverage this issue to execute arbitrary code on the host subject to the user's privileges.

Solution

Microsoft has released a set of patches for Windows 2000, XP, 2003, Vista and 2008.

See Also

https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2008/ms08-032

Plugin Details

Severity: Medium

ID: 33134

File Name: smb_nt_ms08-032.nasl

Version: 1.37

Type: local

Agent: windows

Published: 6/10/2008

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 5.1

Temporal Score: 3.8

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Ease: No known exploits are available

Patch Publication Date: 6/10/2008

Vulnerability Publication Date: 1/30/2007

Reference Information

CVE: CVE-2007-0675, CVE-2008-0956

BID: 29558

CWE: 119, 94

CERT: 216153

MSFT: MS08-032

MSKB: 950760