PC Tools - Essential tools for your PC
Search
 
 
Features
 
 
Newsletter
 
Security Home > Internet Explorer

Cumulative Patch for Internet Explorer New

Microsoft has released a cumulative patch that includes the functionality of all previously released patches for Internet Explorer 5.01, 5.5 and 6.0. In addition, it eliminates two newly discovered vulnerabilities.

Issue

In order to exploit these two new flaws, the attacker would have to create a specially formed HTML email and send it to the user. Alternatively an attacker would have to host a malicious web site that contained a web page designed to exploit these vulnerabilities. The attacker would then have to persuade a user to visit that site.

  • A buffer overrun vulnerability that occurs because Internet Explorer does not properly determine an object type returned from a web server. It could be possible for an attacker who exploited this vulnerability to run arbitrary code on a user's system. If a user visited an attacker’s website, it would be possible for the attacker to exploit this vulnerability without any other user action. An attacker could also craft an HTML email that attempted to exploit this vulnerability.

  • A flaw that results because Internet Explorer does not implement an appropriate block on a file download dialog box. It could be possible for an attacker to exploit this vulnerability to run arbitrary code on a user's system. If a user simply visited an attacker’s website, it would be possible for the attacker to exploit this vulnerability without any other user action. An attacker could also craft an HTML email that attempted to exploit this vulnerability.

    Affected Products

    • Microsoft Internet Explorer 5.01
    • Microsoft Internet Explorer 5.5
    • Microsoft Internet Explorer 6.0
    • Microsoft Internet Explorer 6.0 for Windows Server 2003

    Download

    Software patches are available from the following locations:

    Further Details

    Source: Microsoft Corporation

    Reference: Microsoft Corporation

    Updated: June 4, 2003

    >> Recommended Download - secure your PC from spyware, adware and malware now with Spyware Doctor <<

  •  
      Copyright © 1998-2008 PC Tools. All rights Reserved. Privacy Policy | Legal Notice