|
Microsoft update to stop remote execution
|
|
Secunia Advisory:
|
SA7651
|
|
|
Release Date:
|
2002-12-05
|
|
Last Update:
|
2002-12-07
|
|
Popularity:
|
18,443 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Microsoft Internet Explorer 5.5
Microsoft Internet Explorer 6.x
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 2 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Solution:
We recommend that you install this patch when possible, please keep in mind that you are still vulnerable to multiple other serious vulnerabilities if you do not disable active scripting.
Microsofts patch:
http://www.microsoft.com/windows/ie/downloads/critical/q324929/default.asp
Microsofts bulletin:
http://www.microsoft.com/technet/security/bulletin/MS02-068.asp
For an alternative workaround see:
http://secunia.com/advisories/7084/
http://secunia.com/advisories/7587/
Provided and/or discovered by:
The vulnerabilities has been discovered by different people and companies:
Liu Die Yu, Last Stage of Delirium, GreyMagic, solutions.fi, eyeonsecurity
Thor Larholm compiles a list of unpatched Internet Explorer vulnerabilities.
Changelog:
06/12-2002 Microsoft has agreed with the security community that it indeed is possible execute arbitrary code and not just programs already present on the system. The patch is unchanged but Microsofts official bulletin has changed. (now we only need the rest of the vulnerabilities)
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
