{"id":312,"date":"2014-06-23T15:50:26","date_gmt":"2014-06-23T20:50:26","guid":{"rendered":"https:\/\/10.252.76.154\/?p=312"},"modified":"2015-09-29T16:43:37","modified_gmt":"2015-09-29T21:43:37","slug":"csirt-panama-aviso-2014-06-vulnerabilidad-en-microsoft-internet-explorer-cve-2014-2782","status":"publish","type":"post","link":"https:\/\/cert.pa\/?p=312","title":{"rendered":"CSIRT Panam\u00e1 Aviso 2014-06-Vulnerabilidad en Microsoft Internet Explorer (CVE-2014-2782)"},"content":{"rendered":"

CSIRT Panam\u00e1 Aviso 2014-06-Vulnerabilidad en Microsoft Internet Explorer (CVE-2014-2782)
\nGravedad: ALTA
\nFecha de publicaci\u00f3n: Junio 23, 2014
\nFecha de modificaci\u00f3n: Junio 23, 2014
\n\u00daltima revisi\u00f3n: Revisi\u00f3n A.
\nFuente: CSIRT Panam\u00e1<\/p>\n

Sistemas afectados
\nMicrosoft Internet Explorer 11
\nMicrosoft Internet Explorer 10
\nMicrosoft Internet Explorer 9<\/p>\n

I. Descripci\u00f3n
\nMicrosoft Internet Explorer 9 hasta la versi\u00f3n 11 permite a atacantes remotos ejecutar c\u00f3digo malicioso o causar una negaci\u00f3n de servicio a trav\u00e9s de un sitio web manipulado, tambi\u00e9n conocido como: Vulnerabilidad de Corrupci\u00f3n de Memoria de Internet Explorer; una vulnerabilidad diferente a CVE-2014-1773, CVE-2014-1783, CVE-2014-1784, CVE-2014-1786, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766 y CVE-2014-2775.<\/p>\n

II. Impacto
\nVector de acceso: A trav\u00e9s de red.
\nComplejidad de Acceso: Media.
\nAutenticaci\u00f3n: No requerida para explotarla.
\nTipo de impacto: Compromiso total de la integridad del sistema + Compromiso total de la confidencialidad del sistema + Compromiso total de la disponibilidad del sistema.<\/p>\n

III. Referencia a soluciones, herramientas e informaci\u00f3n
\nhttps:\/\/technet.microsoft.com\/en-us\/library\/security\/ms14-035.aspx
\nhttps:\/\/web.nvd.nist.gov\/view\/vuln\/detail?vulnId=CVE-2014-2782
\nhttp:\/\/www.securityfocus.com\/bid\/68101<\/p>\n

IV. Informaci\u00f3n de contacto
\nCSIRT PANAMA
\nAutoridad Nacional para la Innovaci\u00f3n Gubernamental
\nE-Mail: info@cert.pa
\nWeb: https:\/\/www.cert.pa<\/p>\n

—–BEGIN PGP PUBLIC KEY BLOCK—–
\nVersion: GnuPG v2.0.17 (MingW32)<\/p>\n

mQENBE8C9KoBCAClkvrtdD08B1YgIntnK241GmWY7fRWtPn\/QIEG1+TLokEuOhw+
\nGq\/lK\/4NP9RzqpD57LcRUBiGgTmO\/5C9xkhVmxz2jid0h03fLorC84rAk2pOjr0i
\npbltETq9RCGhOWp13OV22x2yiIedBi05bzw3F+uLHhn9xKjmpBuZB6WO\/TuD52DH
\nKRZtwSvoaa61vL0bGnIf3lNGWkALWEC3lGBppby4D05N2FNfgfOFr1yOpxTaRaDh
\n4kOnoAEWVzppkTPyqSOkwXmgdma8D9yqD41Ffu8ypGTv+OOVO7jDq8tx9wVZEU+w
\npqBTzQcf0P0K7qO3igdHQxqHmqXsaJpbmvCBABEBAAG0KkNTSVJUIFBhbmFtYSAo
\nQ1NJUlQgUGFuYW1hKSA8aW5mb0BjZXJ0LnBhPokBOAQTAQIAIgUCTwL0qgIbDwYL
\nCQgHAwIGFQgCCQoLBBYCAwECHgECF4AACgkQ2YlXchbysSSPSQgAooUy3qSR\/YX2
\nH3USJ5VzrmnraHg5LIWRPIBD1PGrswjLE8hxdobPU\/uzi9LWnEcDscfFVKM\/K0Jt
\nbjeoESqCVFlpE0YXJWdDhy0m2WM410sDE2HVXbPhWGqrNeDb0VUV\/LWag1yYTj5w
\nkkxma4Tk5TqlhgL5su2PpjtTdFSHYD4N+4mu7g1GhRrrpz+u7ZRm3b\/WkAJg5FIg
\nU0MpPqUGAF5\/pc02ZB10FdxDwWyXAkwYUN+zfLiKzKOrBGkEw9+jvFGU+z76P9Zk
\n1XJIexpmkBYTxc+TOclhAp\/3HP4taoBHRMoR1q1YhdC++UgRSLmPLGn\/AB707JzN
\nQ80++q2kWQ==
\n=JUYg
\n—–END PGP PUBLIC KEY BLOCK—–<\/p>\n","protected":false},"excerpt":{"rendered":"

CSIRT Panam\u00e1 Aviso 2014-06-Vulnerabilidad en Microsoft Internet Explorer (CVE-2014-2782) Gravedad: ALTA Fecha de publicaci\u00f3n: Junio 23, 2014 Fecha de modificaci\u00f3n: Junio 23, 2014 \u00daltima revisi\u00f3n: Revisi\u00f3n A. Fuente: CSIRT Panam\u00e1 Sistemas afectados Microsoft Internet Explorer…<\/p>\n","protected":false},"author":4,"featured_media":295,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[4],"tags":[8,21,9],"class_list":["post-312","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-avisos-de-seguridad","tag-avisos","tag-internet-explorer","tag-microsoft"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/312","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=312"}],"version-history":[{"count":4,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/312\/revisions"}],"predecessor-version":[{"id":334,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/312\/revisions\/334"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/media\/295"}],"wp:attachment":[{"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=312"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=312"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=312"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}