|
Microsoft Internet Explorer Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA10192
|
|
|
Release Date:
|
2003-11-11
|
|
Last Update:
|
2004-03-02
|
|
Popularity:
|
24,490 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
Exposure of sensitive information
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Microsoft Windows XP Embedded
|
|
| Software: | Microsoft Internet Explorer 5.01
Microsoft Internet Explorer 5.5
Microsoft Internet Explorer 6.x
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
Microsoft has issued a cumulative patch, which fixes multiple vulnerabilities in Internet Explorer. These vulnerabilities can potentially be exploited to bypass Internet Explorer security restrictions and execute arbitrary code with the privileges of the current user.
Three different vulnerabilities allows malicious HTML documents such as emails or web pages to bypass the security zone restrictions and to perform actions in the Local Zone (My Computer Zone). These vulnerabilities can be exploited to execute code with the privileges of the current user.
One vulnerability allows malicious HTML documents to bypass the security zone restrictions using an XML object. This can be exploited to read arbitrary local files on the system.
One vulnerability allows malicious HTML documents to manipulate the way drag-and-drop works in DHTML events. This can be exploited to trick a user into accepting to download a file by making the user click a malicious link. The file can be saved in an arbitrary location.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
