|
 |
|
Microsoft Internet Explorer flere sårbarheder
|
|
|
|
|
Secunia Advisory:
|
SA26419
|
|
|
Udsendt:
|
2007-08-14
|
|
Sidste Opdt.:
|
2007-08-16
|
|
|
Kritisk:
|
Meget kritisk
|
|
Betydning:
|
Systemadgang
|
|
Hvor:
|
Fra Internet
|
|
Løsning Status:
|
Producent Patch
|
|
| Software: | Microsoft Internet Explorer 5.01
Microsoft Internet Explorer 6.x
Microsoft Internet Explorer 7.x
|
| | CVE reference: | CVE-2007-0943 (Secunia mirror)
CVE-2007-2216 (Secunia mirror)
CVE-2007-3041 (Secunia mirror)
|
|
|
Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS! |
|
|
Beskrivelse:
Der er rapporteret nogle sårbarheder i Internet Explorer, som kan udnyttes af ondsindede personer til at kompromittere en brugers system.
1) En fejl under fortolkningen af visse CSS-strenge kan udnyttes til at korrumpere hukommelsen, når en bruger f.eks. besøger et ondsindet website.
Succesfuld udnyttelse kan muliggøre eksekvering af vilkårlig kode.
2) tblinf32.dll og vstlbinf.dll ActiveX-kontrollen implementerer IObjectsafety fejlagtigt, hvilket kan udnyttes til at eksekvere vilkårlig kode, når en bruger f.eks. besøger et ondsindet website.
3) En fejl i pdwizard.ocx ActiveX-kontrollen kan udnyttes til at korrumere hukommelsen, når en bruger f.eks. besøger et ondsindet website.
Succesfuld udnyttelse kan muliggøre eksekvering af vilkårlig kode.
Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, using the Network Software Inspector.
Løsning:
Installér patches.
Internet Explorer 5.01 SP4 for Windows 2000 SP4:
http://www.microsoft.com/downloads/de...=FCF9440F-BB36-4ED1-9B6B-74A4F055650B
Internet Explorer 6 SP1 for Windows 2000 SP4:
http://www.microsoft.com/downloads/de...=8DB75461-4DCA-43DB-AA30-C7E67CE954AD
Internet Explorer 6 for Windows XP SP2:
http://www.microsoft.com/downloads/de...=5D31D916-867F-4DBF-B8A4-C75EA83F4F51
Internet Explorer 6 for Windows XP Professional x64 Edition (optionally with SP2):
http://www.microsoft.com/downloads/de...=B15B2442-D6DA-41DD-A424-11C9893BE595
Internet Explorer 6 for Windows Server 2003 SP1/SP2:
http://www.microsoft.com/downloads/de...=F2F9FB69-0399-4DF0-9F5B-8F42A130C581
Internet Explorer 6 for Windows Server 2003 x64 Edition (optionally with SP2):
http://www.microsoft.com/downloads/de...=D0BD886D-2C80-4DD7-82B7-1BD1F8D398CC
Internet Explorer 6 for Windows Server 2003 for Itanium-based Systems SP1/SP2:
http://www.microsoft.com/downloads/de...=BF41033A-D6F0-451E-9B69-4CBE2BB3F804
Internet Explorer 7 for Windows XP SP2:
http://www.microsoft.com/downloads/de...=7A2B4395-EABA-45EC-8D0C-932EBCC3D344
Internet Explorer 7 for Windows XP Professional x64 Edition (optionally with SP2):
http://www.microsoft.com/downloads/de...=CD7ED4D5-7790-41DB-8B68-CFD59105CA36
Internet Explorer 7 for Windows Server 2003 SP1/SP2:
http://www.microsoft.com/downloads/de...=4F8DAED8-9925-494D-B2F5-1E29F4040F6A
Internet Explorer 7 for Windows Server 2003 x64 Edition (optionally with SP2):
http://www.microsoft.com/downloads/de...=34669CA2-46B0-4FBF-8FBD-AD7A13920103
Internet Explorer 7 for Windows Server 2003 for Itanium-based Systems SP1/SP2:
http://www.microsoft.com/downloads/de...=5BD7BCBD-528A-4A16-A39A-A5FF5F69A2E2
Internet Explorer 7 for Windows Vista:
http://www.microsoft.com/downloads/de...=9AE27B2F-ACA4-4758-8CE4-A98F1FF6BA70
Internet Explorer 7 for Windows Vista x64 Edition:
http://www.microsoft.com/downloads/de...=53497E53-D10C-43AF-AD56-9F07739A5284
Rapporteret af / Kredit:
1) Hu Qianwei, NSFOCUS Security Team
2) Producenten krediterer Brett Moore, Security-Assessment.com.
Forløb:
16-08-2007: Tilføjede yderligere information fra Nsfocus.
Original Advisory:
MS07-045 (KB937143):
http://www.microsoft.com/technet/security/Bulletin/MS07-045.mspx
NSFOCUS:
http://www.nsfocus.com/english/homepage/research/0701.htm
|
|
|
|
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
|
134 Relaterede Secunia Advisories, displaying 10
|
|
|
1. Internet Explorer flere sårbarheder
|
|
2. Microsoft "Web Proxy Auto-Discovery" feature sikkerhedsproblem
|
|
3. Internet Explorer uspecificeret addressbar-spoofing
|
|
4. Internet Explorer "OnKeyDown" fokus-svaghed
|
|
5. Microsoft Internet Explorer afsløring af FTP login-oplysninger
|
|
6. Microsoft Windows Vector Markup Language buffer overflow
|
|
7. Internet Explorer "document.open()" adressebar-spoofing
|
|
8. Microsoft Internet Explorer 7 HTTP Basic Authentication IDN-spoofing
|
|
9. Internet Explorer flere sårbarheder
|
|
10. Internet Explorer side-loading race condition og URL-spoofing
|
Vis alle relaterede advisories
|
|
|
Send Feedback to Secunia
|
|
Hvis du har ny information angående dette Secunia advisory eller et produkt i vores database, så send det venligst til os. Du kan sende det til os enten ved at bruge vores web formular eller ved at sende det til vuln@secunia.com.
Ideer, foreslag og andet feedback er også meget velkommen.
|
|
|
|
|
|
Secunia PSI
Scan | Patch | Track
Free Download
|
|
|
Secunia Poll
|
|
|
|
|
 |
|
|
Most Popular Advisories
|
|
|
|
|
|
