Secunia

Some vulnerabilities has been reported in Microsoft Internet Explorer, which can be exploited by malicious people to compromise a user's system.

1) A race condition in the processing of DHTML objects for multiple threads can be exploited to execute arbitrary code via specially crafted HTML emails and web sites.

2) An error in the "InternetCreateUrlW()" API when handling hostnames can be exploited to corrupt the heap via a specially crafted HTML document opening an URL with a long hostname (more than 256 characters).

Successful exploitation may allow execution of arbitrary code.

3) A boundary error in the handling of Content Advisor ratings can be exploited to execute arbitrary code via specially crafted Content Advisor content.

Successful exploitation requires the user to accept and install the Content Advisor ratings.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
1) Berend-Jan Wever
2) 3APA3A and axle@bytefall
3) Andres Tarasco, SIA Group

Changelog
Further details available in Customer Area

Original Advisory
MS05-020 (KB89092):
http://www.microsoft.com/technet/security/Bulletin/MS05-020.mspx

Skylined:
http://www.edup.tudelft.nl/~bjwever/advisory_msie_R6025.html.php

iDEFENSE:
http://www.idefense.com/application/poi/display?id=228&type=vulnerabilities
http://www.idefense.com/application/poi/display?id=229&type=vulnerabilities

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area