Microsoft Internet Explorer Multiple Vulnerabilities - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

Microsoft Internet Explorer Multiple Vulnerabilities

Secunia Advisory:	SA12192
Release Date:	2004-07-30
Last Update:	2004-08-02

Critical:	Highly critical
Impact:	DoS System access
Where:	From remote
Solution Status:	Vendor Patch

Software:	Microsoft Internet Explorer 5.01 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 6.x

CVE reference:	CVE-2004-0549 (Secunia mirror) CVE-2004-0566 (Secunia mirror) CVE-2003-1048 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: Microsoft has issued an update for Internet Explorer. This fixes three vulnerabilities, allowing malicious websites to cause a DoS (Denial of Service) or compromise a user's system. 1) An error can be exploited to bypass the zone restrictions in Internet Explorer. For more information: SA11793 2) An integer signedness error within the handling of BMP images can be exploited to execute arbitrary code. This vulnerability has already been fixed in prior service packs for Internet Explorer. 3) A boundary error within the handling of GIF images can reportedly be exploited to execute arbitrary code on a vulnerable system. Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, using the Network Software Inspector. Solution: Microsoft has released updates: Internet Explorer 5.01 requires Service Pack 2: http://www.microsoft.com/downloads/de...-8028-E91FCFAB252B&displaylang=en Internet Explorer 5.01 requires Service Pack 3: http://www.microsoft.com/downloads/de...-B72E-ED9D62577A60&displaylang=en Internet Explorer 5.01 requires Service Pack 4: http://www.microsoft.com/downloads/de...-985B-C3958FAD3D4C&displaylang=en Internet Explorer 5.5 requires Service Pack 2: http://www.microsoft.com/downloads/de...-A663-FC187C18CD9B&displaylang=en Internet Explorer 6: http://www.microsoft.com/downloads/de...-A75F-7636D8BEE576&displaylang=en Internet Explorer 6 requires Service Pack 1: http://www.microsoft.com/downloads/de...-A75F-7636D8BEE576&displaylang=en Internet Explorer 6 requires Service Pack 1 (64-Bit Edition): http://www.microsoft.com/downloads/de...-BD65-C8D37A0DD62D&displaylang=en Internet Explorer 6 for Windows Server 2003: http://www.microsoft.com/downloads/de...-8DBE-2492B4AFBC3B&displaylang=en Internet Explorer 6 for Windows Server 2003 (64-Bit Edition): http://www.microsoft.com/downloads/de...-BB32-F8A4D36C5FB9&displaylang=en Changelog: 2004-08-02: Added link to US-CERT vulnerability notes. Original Advisory: http://www.microsoft.com/technet/security/bulletin/ms04-025.mspx Other References: SA11793: http://secunia.com/advisories/11793/ US-CERT VU#266926: http://www.kb.cert.org/vuls/id/266926 US-CERT VU#685364: http://www.kb.cert.org/vuls/id/685364



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

133 Related Secunia Security Advisories, displaying 10

1. Internet Explorer 6 Window "location" Handling Vulnerability

2. Internet Explorer "substringData()" Memory Corruption Vulnerability

3. Internet Explorer "Print Table of Links" Cross-Zone Scripting

4. Internet Explorer HTTP Request Smuggling/Splitting Vulnerabilities

5. Internet Explorer FTP Command Injection Vulnerability

6. Microsoft Internet Explorer Multiple Vulnerabilities

7. Internet Explorer Multiple Code Execution Vulnerabilities

8. Microsoft Web Proxy Auto-Discovery Feature Security Issue

9. Internet Explorer Data Stream Handling Vulnerability

10. Internet Explorer Unspecified Address Bar Spoofing Vulnerability

Show all related advisories

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Mozilla Firefox Multiple Vulnerabilities

2.	Opera for Windows Unspecified Code Execution

3.	VLC Media Player WAV Processing Integer Overflow

4.	Novell eDirectory ds.dlm Module Buffer Overflow

5.	GNOME Glib PCRE pcre_compile.c Buffer Overflow Vulnerability

6.	WordPress WassUp Plugin "to_date" SQL Injection Vulnerability

7.	Opera Canvas Functions Information Disclosure

8.	Mozilla Thunderbird Multiple Vulnerabilities

9.	Fedora update for glib2

10.	UnixWare ReliantHA Privilege Escalation Vulnerabilities