Microsoft Internet Explorer Update fixes the Object Data Vulnerability - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

Microsoft Internet Explorer Update fixes the Object Data Vulnerability

Secunia Advisory:	SA9935
Release Date:	2003-10-04
Last Update:	2003-10-06

Critical:	Extremely critical
Impact:	System access
Where:	From remote
Solution Status:	Vendor Patch

Software:	Microsoft Internet Explorer 5.01 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 6.x

CVE reference:	CVE-2003-0838 (Secunia mirror) CVE-2003-0809 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: Microsoft has released a new cumulative patch for Internet Explorer. This fixes the Object Data vulnerability, which was inadequatedly addressed in MS03-32. The Object Data vulnerability could be exploited to execute arbitrary code on a user's system through HTML documents such as emails and web pages. Further information about the Object Data vulnerability: SA9580 The cumulative patch also changes some behaviour of DHTML, which in combination with other vulnerabilities or programs such as Windows Media Player could lead to execution of arbitrary code. This change does not seem to fix the problem completely as Microsoft still recommends users to upgrade Windows Media Player. For more information: SA9358 Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, using the Network Software Inspector. Solution: The patch is available from WindowsUpdate or from: http://www.microsoft.com/windows/ie/downloads/critical/828750/default.asp For Windows Server 2003: http://www.microsoft.com/windows/ie/downloads/critical/828750s/default.asp This patch supercedes any previous patches for Internet Explorer. Microsoft recommends that you install the latest version of Windows Media Player: http://www.microsoft.com/windows/windowsmedia/download/default.asp Secunia recommends that you uninstall Windows Media Player if it isn't needed. Original Advisory: http://www.microsoft.com/technet/tree...echnet/security/bulletin/MS03-040.asp Other References: SA9580: http://secunia.com/advisories/9580/ SA9358: http://secunia.com/advisories/9358/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

135 Related Secunia Security Advisories, displaying 10

1. Internet Explorer MHTML Protocol Handler Cross-Domain Information Disclosure

2. Internet Explorer Multiple Vulnerabilities

3. Internet Explorer 6 Window "location" Handling Vulnerability

4. Internet Explorer "substringData()" Memory Corruption Vulnerability

5. Internet Explorer "Print Table of Links" Cross-Zone Scripting

6. Internet Explorer HTTP Request Smuggling/Splitting Vulnerabilities

7. Internet Explorer FTP Command Injection Vulnerability

8. Microsoft Internet Explorer Multiple Vulnerabilities

9. Internet Explorer Multiple Code Execution Vulnerabilities

10. Microsoft Web Proxy Auto-Discovery Feature Security Issue

Show all related advisories

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Opera Multiple Vulnerabilities

2.	Anzio Web Print Object (WePO) ActiveX Component "mainurl" Buffer Overflow

3.	vBulletin Private Message Subject Script Insertion

4.	Folder Lock Weak Password Encryption Security Issue

5.	neon "parse_domain() " Denial of Service Vulnerability

6.	SunShop Shopping Cart class.ajax.php SQL Injection Vulnerabilities

7.	Short Url & Url Tracker Script "id" SQL Injection Vulnerability

8.	PHP Live Helper Multiple Vulnerabilities

9.	URL Rotator Script "id" SQL Injection Vulnerability

10.	Programs Rating "id" SQL Injection Vulnerability