Microsoft Visual FoxPro 缓冲区错误漏洞

临时解决方法：

* 禁止尝试在Internet Explorer中运行COM对象，将以下文本粘贴于记事本等文本编辑器中。然后，使用.reg文件扩展名保存文件并双击导入：

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerActiveX Compatibility{EF28418F-FFB2-11D0-861A-00A0C903A97F}]

"Compatibility Flags"=dword:00000400

Microsoft已经为此发布了一个安全公告(MS08-010)以及相应补丁:

MS08-010：Cumulative Security Update for Internet Explorer (944533)

链接：

http://www.microsoft.com/technet/security/Bulletin/MS08-010.mspx?pf=true

来源:http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-4790 http://www.securityfocus.com/bid/25571 http://www.nsfocus.net/vulndb/11481

链接:无

来源:SECTRACK

链接:http://www.securitytracker.com/id?1019378

来源:EXPLOIT-DB

链接:https://www.exploit-db.com/exploits/4369

来源:CERT

链接:http://www.us-cert.gov/cas/techalerts/TA08-043C.html

来源:VUPEN

链接:http://www.vupen.com/english/advisories/2008/0512/references

来源:XF

链接:https://exchange.xforce.ibmcloud.com/vulnerabilities/36496

来源:MS

链接:https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-010

来源:OVAL

链接:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5481

来源:BID

链接:https://www.securityfocus.com/bid/25571

来源:HP

链接:http://marc.info/?l=bugtraq&m=120361015026386&w=2