---------------------------------------------------------------------- BETA test the new Secunia Personal Software Inspector! The Secunia PSI detects installed software on your computer and categorises it as either Insecure, End-of-Life, or Up-To-Date. Effectively enabling you to focus your attention on software installations where more secure versions are available from the vendors. Download the free PSI BETA from the Secunia website: https://psi.secunia.com/ ---------------------------------------------------------------------- TITLE: Microsoft Internet Explorer Multiple Vulnerabilities SECUNIA ADVISORY ID: SA26419 VERIFY ADVISORY: http://secunia.com/advisories/26419/ CRITICAL: Highly critical IMPACT: System access WHERE: >From remote SOFTWARE: Microsoft Internet Explorer 5.01 http://secunia.com/product/9/ Microsoft Internet Explorer 6.x http://secunia.com/product/11/ Microsoft Internet Explorer 7.x http://secunia.com/product/12366/ DESCRIPTION: Some vulnerabilities have been reported in Internet Explorer, which can be exploited by malicious people to compromise a user's system. 1) An error when parsing certain CSS strings can be exploited to cause a memory corruption when a user e.g. visits a malicious website. Successful exploitation may allow execution of arbitrary code. 2) The tblinf32.dll or vstlbinf.dll ActiveX control implements IObjectsafety incorrectly, which can be exploited to execute arbitrary code when a user e.g. visits a malicious website. 3) An error in the pdwizard.ocx ActiveX control can be exploited to cause a memory corruption when a user e.g. visits a malicious website. Successful exploitation may allow execution of arbitrary code. SOLUTION: Apply patches. Internet Explorer 5.01 SP4 for Windows 2000 SP4: http://www.microsoft.com/downloads/details.aspx?FamilyId=FCF9440F-BB36-4ED1-9B6B-74A4F055650B Internet Explorer 6 SP1 for Windows 2000 SP4: http://www.microsoft.com/downloads/details.aspx?FamilyId=8DB75461-4DCA-43DB-AA30-C7E67CE954AD Internet Explorer 6 for Windows XP SP2: http://www.microsoft.com/downloads/details.aspx?FamilyId=5D31D916-867F-4DBF-B8A4-C75EA83F4F51 Internet Explorer 6 for Windows XP Professional x64 Edition (optionally with SP2): http://www.microsoft.com/downloads/details.aspx?FamilyId=B15B2442-D6DA-41DD-A424-11C9893BE595 Internet Explorer 6 for Windows Server 2003 SP1/SP2: http://www.microsoft.com/downloads/details.aspx?FamilyId=F2F9FB69-0399-4DF0-9F5B-8F42A130C581 Internet Explorer 6 for Windows Server 2003 x64 Edition (optionally with SP2): http://www.microsoft.com/downloads/details.aspx?FamilyId=D0BD886D-2C80-4DD7-82B7-1BD1F8D398CC Internet Explorer 6 for Windows Server 2003 for Itanium-based Systems SP1/SP2: http://www.microsoft.com/downloads/details.aspx?FamilyId=BF41033A-D6F0-451E-9B69-4CBE2BB3F804 Internet Explorer 7 for Windows XP SP2: http://www.microsoft.com/downloads/details.aspx?FamilyId=7A2B4395-EABA-45EC-8D0C-932EBCC3D344 Internet Explorer 7 for Windows XP Professional x64 Edition (optionally with SP2): http://www.microsoft.com/downloads/details.aspx?FamilyId=CD7ED4D5-7790-41DB-8B68-CFD59105CA36 Internet Explorer 7 for Windows Server 2003 SP1/SP2: http://www.microsoft.com/downloads/details.aspx?FamilyId=4F8DAED8-9925-494D-B2F5-1E29F4040F6A Internet Explorer 7 for Windows Server 2003 x64 Edition (optionally with SP2): http://www.microsoft.com/downloads/details.aspx?FamilyId=34669CA2-46B0-4FBF-8FBD-AD7A13920103 Internet Explorer 7 for Windows Server 2003 for Itanium-based Systems SP1/SP2: http://www.microsoft.com/downloads/details.aspx?FamilyId=5BD7BCBD-528A-4A16-A39A-A5FF5F69A2E2 Internet Explorer 7 for Windows Vista: http://www.microsoft.com/downloads/details.aspx?FamilyId=9AE27B2F-ACA4-4758-8CE4-A98F1FF6BA70 Internet Explorer 7 for Windows Vista x64 Edition: http://www.microsoft.com/downloads/details.aspx?FamilyId=53497E53-D10C-43AF-AD56-9F07739A5284 PROVIDED AND/OR DISCOVERED BY: The vendor credits: 1) NSFocus Security Team 2) Brett Moore, Security-Assessment.com ORIGINAL ADVISORY: MS07-045 (KB937143): http://www.microsoft.com/technet/security/Bulletin/MS07-045.mspx ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------