Secunia Logo  
 Vulnerability InformationVulnerability ScanningCommunityBlog - new entry!Corporate InformationOnline ShopCustomer Login  
 Secunia AdvisoriesSecunia ResearchBinary Analysis  
Home > Vulnerability Information > Secunia Advisories > Internet Explorer Unspecified Automatic .HTA Application Execution
Secunia Advisories
Advisories
Search
Advisories by Product
Advisories by Vendor
Historic Advisories
Mailing Lists
Report Vulnerability
Contact Form
Business Solutions Restricted
Partner Solutions Restricted
About


Secunia PSI WorldMap 		 
Internet Explorer Unspecified Automatic .HTA Application Execution
Secunia Advisory: SA19378
Advisory Toolbox:
Issue ticket
Save in to-do list
Mark as handled
Exploit information
Download as PDF
Review actions
Add comment
Release Date: 2006-03-27
Last Update: 2006-04-11
Popularity: 27,539 views

Critical:
Highly critical
Impact: System access
Where: From remote
Solution Status: Vendor Patch

Software:Microsoft Internet Explorer 5.01
Microsoft Internet Explorer 5.5
Microsoft Internet Explorer 6.x
Secunia CVSS-2 Score: Available in Secunia business solutions

Subscribe: Instant alerts on relevant vulnerabilities


Advisory Content (Page 2 of 3)[ 1 ] [ 2 ] [ 3 ]

Solution:
Apply patches.

Internet Explorer 5.01 SP4 on Windows 2000 SP4:
http://www.microsoft.com/downloa...7B87-AF8F-4346-9164-596E3E5C22B1

Internet Explorer 6 SP1 on Windows 2000 SP4 or Windows XP SP1:
http://www.microsoft.com/downloa...41E1-2B36-4696-987A-099FC57E0129

Internet Explorer 6 for Windows XP SP2:
http://www.microsoft.com/downloa...FB31-E6B4-4771-81F1-4ACCEBF72133

Internet Explorer 6 for Windows Server 2003 and Windows Server 2003 SP1:
http://www.microsoft.com/downloa...6871-D217-41D3-BECC-B27FAFA00054

Internet Explorer 6 for Windows Server 2003 for Itanium-based systems and Windows Server 2003 with SP1 for Itanium-based systems:
http://www.microsoft.com/downloa...957C-0ABE-4129-ABAF-AA2852AD62A3

Internet Explorer 6 for Windows Server 2003 x64 Edition:
http://www.microsoft.com/downloa...8BE3-39EE-4937-9BD1-280FC35125C6

Internet Explorer 6 for Windows XP Professional x64 Edition:
http://www.microsoft.com/downloa...FE3E-620A-4BBC-868B-CA2D9EFF7AC3

Internet Explorer 6 SP1 on Windows 98, Windows 98 SE, or Windows ME:
Patches are available via the Microsoft Update Web site or the Windows Update Web site.

Provided and/or discovered by:
Jeffrey van der Stad

Changelog:
2006-03-28: Added CVE reference.
2006-04-11: Updated "Solution" section. Added link to Microsoft security bulletin.

Original Advisory:
MS06-013 (KB912812):
http://www.microsoft.com/technet/security/Bulletin/MS06-013.mspx

Jeffrey van der Stad:
http://jeffrey.vanderstad.net/grasshopper/

Other References:
US-CERT VU#434641:
http://www.kb.cert.org/vuls/id/434641

Change Page:
[ 1 ] [ 2 ] [ 3 ]


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

23rd Nov, 2009
New advisories: 16
New vulnerabilities: 116
Updated advisories: 36

Moderately // 241 views
Magic Music Player Playlist Processing Buffer Overflow Vulnerability
Moderately // 238 views
FMOD Ex Playlist Processing Multiple Vulnerabilities
Moderately // 216 views
IP.Board SQL Injection Vulnerabilities
Moderately // 415 views
Firefox infoRSS Extension Cross-Context Scripting Vulnerability
Highly // 245 views
Outreach Project Tool "CRM_path" File Inclusion Vulnerability
Less // 314 views
Sun Solaris OpenSSL TLS Session Renegotiation Plaintext Injection Vulnerability
Highly // 301 views
PHP Traverser "GLOBALS[BASE]" File Inclusion Vulnerability
Moderately // 485 views
Opera Multiple Vulnerabilities
Moderately // 234 views
Betsy CMS "popup" Local File Inclusion Vulnerability
Less // 381 views
MySQL Denial of Service and Client Certificate Verification Vulnerabilities

Solutions | More...  

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Internet Explorer Layout Handling Memory Corruption Vulnerability // 74 views
2. Sun Solaris OpenSSL TLS Session Renegotiation Plaintext Injection Vulnerability // 35 views
3. Firefox infoRSS Extension Cross-Context Scripting Vulnerability // 32 views
4. Opera Multiple Vulnerabilities // 30 views
5. Magic Music Player Playlist Processing Buffer Overflow Vulnerability // 28 views
6. VMware ESXi update for ntp // 27 views
7. MySQL Denial of Service and Client Certificate Verification Vulnerabilities // 27 views
8. FMOD Ex Playlist Processing Multiple Vulnerabilities // 26 views
9. Internet Explorer Charset Inheritance Cross-Site Scripting Vulnerability // 25 views
10. VMware Products Update for Multiple Packages // 23 views



Contact | Terms & Conditions and Copyright | Report Vulnerability | Press | Jobs (open positions) | About Secunia
Copyright Secunia 2002-2009