Secunia http://secunia.com/advisories/26800/
> Microsoft Windows CFileFind Class "FindFile()" Buffer Overflow
> Secunia Advisory: SA26800
> Release Date: 2007-09-17
> Critical: Moderately critical
> Impact: System access
> Where: From remote
> Solution Status: Unpatched
>
>OS: Microsoft Windows XP Professional
(Snip)
> The vulnerability is confirmed on a fully-patched Windows XP SP2
> including mfc42.dll version 6.2.4131.0 and mfc42u.dll version 6.2.8071.0.
ãŠã‚„ーã€mfc42 ã§ã™ã‹ã。使ã£ã¦ã„るソフトã£ã¦å¤šãã†ã§ã™ã‚ˆãã‡ã€‚ã¡ã‚‡ã£ã¨èª¿ã¹ã‚‹ã¨ã€Windows ã® System フォルダ以外㫠Epson ã•ã‚“㨠Buffalo ã•ã‚“ã®ãƒ„ールã«ã‚ã£ãŸã‚Šã—ã¾ã™ã€‚
ウィã‚ペディア http://ja.wikipedia.org/wiki/Microsoft_Foundation_Class
> Microsoft Foundation Class
ã„ã˜ã‚‡ã†ã§ã™ã€‚
-
- -
(2007/09/26 追記)
JPCERT/CC and IPA http://jvn.jp/cert/JVNVU%23611008/
> JVNVU#611008
> Microsoft MFC FindFile() 関数ã«ãƒ’ープãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼ã®è„†å¼±æ€§
ã„ã˜ã‚‡ã†ã§ã™ã€‚
-
- -
