VRDA Feed by JPCERT/CC
  Vulnerability Response Decision Assistance Feed : 脆弱性脅威分析用情報の定型データ配信
[ about VRDA Feed | JPCERT/CC ] 



 
分析対象脆弱性情報 (リビジョン番号 : 1) [ Download XML ] 
VRDA-100210-001
Microsoft 製品における複数の脆弱性に対するアップデート
http://www.microsoft.com/japan/technet/security/bulletin/ms10-feb.mspx

このセキュリティ情報は 2010 年 2 月に公開したセキュリティ情報の一覧です。




この情報について
分析情報提供元:
 		JPCERT/CC
 		初版公開日:
 		2010-02-10
分析対象脆弱性情報の分類:
 		アドバイザリ・注意喚起
 		最終更新日:
 		2010-02-10




脆弱性の影響を受ける製品の識別子
cpe:/a:microsoft:office:2003     (Microsoft Office 2003)
cpe:/a:microsoft:office:2007     (Microsoft Office 2007)
cpe:/o:microsoft:windows_2000     (Microsoft Windows 2000)
cpe:/o:microsoft:windows_server:2003     (Microsoft Windows Server 2003)
cpe:/o:microsoft:windows_server:2008     (Microsoft Windows Server 2008)
cpe:/o:microsoft:windows_vista     (Microsoft Windows Vista)
cpe:/o:microsoft:windows_xp     (Microsoft Windows XP)
lapt:/o:microsoft:windows_7     (Windows 7)
 


脆弱性の分析内容
[分析に利用した情報の信頼性] [?]
低 [?]

中 [?]
X 高 [?]
[影響の大きさ] [?]
小 [?]

小～中 [?]
中～大 [?]
X 大 [?]
[攻撃経路] [?]
物理アクセス [?]

ローカルマシン上 [?]
同一セグメント上 [?]
X インターネット経由 [?]
[認証レベル] [?]
管理者アカウント [?]

一般ユーザアカウント [?]
フリーアカウント [?]
X 不要 [?]
[攻撃成立に必要なユーザの関与] [?]
複雑 [?]

X 簡単 [?]
不要 [?]
[攻撃の難易度] [?]
高 [?]

中～高 [?]
低～中 [?]
低 [?]
[対策の有無] [?]
X 公式パッチ有り [?]

公式回避策有り [?]
非公式回避策・パッチ有り [?]
なし [?]
[インシデントの発生状況] [?]
X 活動なし [?]

Exploit/PoCあり [?]
活動あり [?]
関連情報




参考情報
Common Vulnerabilities and Exposures (CVE) CVE-2010-0016




Common Vulnerabilities and Exposures (CVE) CVE-2010-0017




Common Vulnerabilities and Exposures (CVE) CVE-2010-0020




Common Vulnerabilities and Exposures (CVE) CVE-2010-0021




Common Vulnerabilities and Exposures (CVE) CVE-2010-0022




Common Vulnerabilities and Exposures (CVE) CVE-2010-0023




Common Vulnerabilities and Exposures (CVE) CVE-2010-0026




Common Vulnerabilities and Exposures (CVE) CVE-2010-0027
The URL validation functionality in Microsoft Internet Explorer 7 and8 does not properly process input parameters, which allows remoteattackers to execute arbitrary local programs via a crafted URL, aka"URL Validation Vulnerability."




Common Vulnerabilities and Exposures (CVE) CVE-2010-0028




Common Vulnerabilities and Exposures (CVE) CVE-2010-0029




Common Vulnerabilities and Exposures (CVE) CVE-2010-0030




Common Vulnerabilities and Exposures (CVE) CVE-2010-0031




Common Vulnerabilities and Exposures (CVE) CVE-2010-0032




Common Vulnerabilities and Exposures (CVE) CVE-2010-0033




Common Vulnerabilities and Exposures (CVE) CVE-2010-0034




Common Vulnerabilities and Exposures (CVE) CVE-2010-0035




Common Vulnerabilities and Exposures (CVE) CVE-2010-0231




Common Vulnerabilities and Exposures (CVE) CVE-2010-0232
The kernel in Microsoft Windows NT 3.1 through Windows 7, includingWindows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2,Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold andSP2, when access to 16-bit applications is enabled on a 32-bit x86platform, does not properly validate certain BIOS calls, which allowslocal users to gain privileges by crafting a VDM_TIB data structure inthe Thread Environment Block (TEB), and then calling the NtVdmControlfunction to start the Windows Virtual DOS Machine (aka NTVDM)subsystem, leading to improperly handled exceptions involving the #GPtrap handler (aka nt!KiTrap0D).




Common Vulnerabilities and Exposures (CVE) CVE-2010-0233




Common Vulnerabilities and Exposures (CVE) CVE-2010-0239




Common Vulnerabilities and Exposures (CVE) CVE-2010-0240




Common Vulnerabilities and Exposures (CVE) CVE-2010-0241




Common Vulnerabilities and Exposures (CVE) CVE-2010-0242




Common Vulnerabilities and Exposures (CVE) CVE-2010-0243




Common Vulnerabilities and Exposures (CVE) CVE-2010-0250




Copyright © 2010 JPCERT/CC All Rights Reserved.