Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers to execute arbitrary code without user approval.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Authenticode校验远程任意代码执行漏洞(MS03-041)
Vulnerability Description
Microsoft Authenticode是一款允许用户验证ActiveX控件的技术。Microsoft Authenticode存在访问验证问题，可允许ActiveX控件在没有任何提示的情况下下载和安装。要利用这个漏洞，攻击者必须构建恶意页面，诱使用户访问，并使ActiveX控件在用户系统上安装和执行。另外，攻击者可以建立特殊的HTML邮件发送给用户，当用户浏览邮件时，未授权的ActiveX控件可在用户系统上安装和执行。Authenticode存在的漏洞可使上述两个情况中以用户权限没有任何提示情况下安
CVSS Information
N/A
Vulnerability Type
N/A