|
Microsoft Internet Explorer Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA35362
|
|
|
Release Date:
|
2009-06-09
|
|
Last Update:
|
2009-06-11
|
|
Popularity:
|
6,855 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
Security Bypass
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Microsoft Internet Explorer 5.01
Microsoft Internet Explorer 6.x
Microsoft Internet Explorer 7.x
Microsoft Internet Explorer 8.x
|
|
|
Binary Analysis:
|
BA770 :: Available for 1 Credit 
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 2 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Solution:
Apply updates.
Windows 2000 SP4 with Internet Explorer 5.01 SP4:
http://www.microsoft.com/downloads/de...=d645ad82-13c3-4030-808b-834e86ed3298
Windows 2000 SP4 with Internet Explorer 6 SP1:
http://www.microsoft.com/downloads/de...=fe8b3796-a407-4f41-89eb-35b4bcc24ff6
Windows XP SP2/SP3 with Internet Explorer 6:
http://www.microsoft.com/downloads/de...=3d7f63ee-d7c3-48a5-902e-60625405e97d
Windows XP Professional x64 Edition SP2 with Internet Explorer 6:
http://www.microsoft.com/downloads/de...=088f70eb-c5c5-426a-880a-18ed386d0b56
Windows Server 2003 SP2 with Internet Explorer 6:
http://www.microsoft.com/downloads/de...=72a23752-86fb-4cc9-ab8e-63ffdfae5bec
Windows Server 2003 x64 Edition SP2 with Internet Explorer 6:
http://www.microsoft.com/downloads/de...=2a03d3c4-e39d-43a3-8d42-216e9551be96
Windows Server 2003 with SP2 for Itanium-based Systems with Internet Explorer 6:
http://www.microsoft.com/downloads/de...=58efde2c-e0b8-4259-b19e-80564b834882
Windows XP SP2/SP3 with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=827b735c-660b-4723-b688-3297e107153a
Windows XP Professional x64 Edition SP2 with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=e5d2c81e-ffab-4e3b-a59a-a55000597213
Windows Server 2003 SP2 with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=a980b867-c67f-4c61-b6db-e55c2ca68dc0
Windows Server 2003 x64 Edition SP2 with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=5e7d6372-9c8c-449d-88fd-afd4f92ad9e6
Windows Server 2003 with SP2 for Itanium-based Systems with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=a2d2907e-67ae-44a4-a805-8670e659ea57
Windows Vista (optionally with Service Pack 1) with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=e60215c3-b8b9-4e45-9d9f-b3fb0b47cce1
Windows Vista SP2 with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=e60215c3-b8b9-4e45-9d9f-b3fb0b47cce1
Windows Vista x64 Edition (optionally with Service Pack 1) with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=88185088-8c2c-4bc6-89b2-87f4d4849cf7
Windows Vista x64 Edition SP2 with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=88185088-8c2c-4bc6-89b2-87f4d4849cf7
Windows Server 2008 for 32-bit Systems with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=a0e3f975-57da-43fa-ac12-3d14fd6ce939
Windows Server 2008 for 32-bit Systems SP2 with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=a0e3f975-57da-43fa-ac12-3d14fd6ce939
Windows Server 2008 for x64-based Systems with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=758edce7-2a82-4b2e-bd71-5b7075cc4b17
Windows Server 2008 for x64-based Systems SP2 with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=758edce7-2a82-4b2e-bd71-5b7075cc4b17
Windows Server 2008 for Itanium-based Systems with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=67d4c189-030d-42eb-98b9-7957ccd92592
Windows Server 2008 for Itanium-based Systems SP2 with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=67d4c189-030d-42eb-98b9-7957ccd92592
Windows XP SP2/SP3 with Internet Explorer 8:
http://www.microsoft.com/downloads/de...=d9e27ce1-4e7c-437f-9477-e7805a33da08
Windows XP Professional x64 Edition SP2 with Internet Explorer 8:
http://www.microsoft.com/downloads/de...=a24aedf0-7a31-4ee8-a9a6-998f1160c700
Windows Server 2003 SP2 with Internet Explorer 8:
http://www.microsoft.com/downloads/de...=298143f2-f37a-4a2c-86ac-9804d4ff1dad
Windows Server 2003 x64 Edition SP2 with Internet Explorer 8:
http://www.microsoft.com/downloads/de...=4a5401d7-ca97-4734-a0e9-d7ffe0777e34
Windows Vista (optionally with Service Pack 1 or 2) with Internet Explorer 8:
http://www.microsoft.com/downloads/de...=6f2730e9-b4fc-4f20-96cf-73f1be63f374
Windows Vista x64 Edition (optionally with Service Pack 1 or 2) with Internet Explorer 8:
http://www.microsoft.com/downloads/de...=5edb14f7-11ec-4180-9f0f-b2673f1c8d83
Windows Server 2008 for 32-bit Systems (optionally with Service Pack 2) with Internet Explorer 8:
http://www.microsoft.com/downloads/de...=aaad301c-d232-4733-a0df-8e5d41bbfde8
Windows Server 2008 for x64-based Systems (optionally with Service Pack 2) Internet Explorer 8:
http://www.microsoft.com/downloads/de...=faac92d4-4a2b-4bb5-8bd1-1519a9fa8147
Provided and/or discovered by:
1) Jorge Luis Alvarez Medina of Core Security Technologies
2) Haifei Li of Fortinet’s FortiGuard Global Security Research Team
3) an anonymous researcher, reported via ZDI
4) Peter Vreugdenhil, reported via ZDI
5, 6) ling and wushi of team509, reported via ZDI
7) Nils, reported via ZDI
Changelog:
2009-06-10: Updated vulnerability #1 in "Description" and added links to "Original Advisory" section.
2009-06-11: Added ZDI links to the "Original Advisory" section. Added additional vulnerability details and updated credits.
Original Advisory:
Microsoft (KB969897):
http://www.microsoft.com/technet/security/Bulletin/MS09-019.mspx
Core Security Technologies:
http://www.coresecurity.com/content/ie-security-zone-bypass
Fortinet’s FortiGuard Global Security Research Team:
http://www.fortiguardcenter.com/advisory/FGA-2009-22.html
ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-09-036/
http://www.zerodayinitiative.com/advisories/ZDI-09-037/
http://www.zerodayinitiative.com/advisories/ZDI-09-038/
http://www.zerodayinitiative.com/advisories/ZDI-09-039/
http://www.zerodayinitiative.com/advisories/ZDI-09-041/
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
