Secunia

Description

Microsoft has issued an update for Internet Explorer. This fixes three vulnerabilities, allowing malicious websites to cause a DoS (Denial of Service) or compromise a user's system.

1) An error can be exploited to bypass the zone restrictions in Internet Explorer.

For more information:
SA11793

2) An integer signedness error within the handling of BMP images can be exploited to execute arbitrary code. This vulnerability has already been fixed in prior service packs for Internet Explorer.

3) A boundary error within the handling of GIF images can reportedly be exploited to execute arbitrary code on a vulnerable system.

Solution
Microsoft has released updates:
Further details available in Customer Area

Changelog
Further details available in Customer Area

Original Advisory
http://www.microsoft.com/technet/security/bulletin/ms04-025.mspx

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area