Description

Microsoft has released a new cumulative patch for Internet Explorer. This fixes the Object Data vulnerability, which was inadequatedly addressed in MS03-32.

The Object Data vulnerability could be exploited to execute arbitrary code on a user's system through HTML documents such as emails and web pages.

Further information about the Object Data vulnerability:
SA9580

The cumulative patch also changes some behaviour of DHTML, which in combination with other vulnerabilities or programs such as Windows Media Player could lead to execution of arbitrary code. This change does not seem to fix the problem completely as Microsoft still recommends users to upgrade Windows Media Player.

For more information:
SA9358

Solution
The patch is available from WindowsUpdate or from:
Further details available to Secunia VIM customers

Original Advisory
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-040.asp

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers