|
Microsoft vulnerabilities not fixed
|
|
Secunia Advisory:
|
SA7579
|
|
|
Release Date:
|
2002-11-22
|
|
Last Update:
|
2002-11-27
|
|
Popularity:
|
18,410 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Microsoft Internet Explorer 5.01
Microsoft Internet Explorer 5.5
Microsoft Internet Explorer 6.x
Microsoft Outlook 2000
Microsoft Outlook 2002
Microsoft Outlook 97
Microsoft Outlook 98
Microsoft Outlook Express 5
Microsoft Outlook Express 5.5
Microsoft Outlook Express 6
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
Microsoft issued two advisories on 20th November 2002. It appears however that the vulnerabilities STILL exist to a certain extent.
MS02-065 regarding vulnerabilities RDS / MDAC
Microsoft has stated that the previous version of MDAC may be reactivated by an attacker, the reason is that the Kill Bit has not been set. This allows an old component to be reactivated - without any warning, thus the vulnerability may still be exploited.
MS02-066 regarding a cumulative patch which closed numerous vulnerabilities. This should apparently have fixed the issue which allowed malicious websites to execute executable files in the local security zone. This is however still possible, what has been closed is another vulnerability which made it possible to pass arguments to the executable file.
It is also still possible to read contents of the clipboard as well as writing new contents to it.
Microsoft has known about these vulnerabilities at least since 22nd October 2002
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
