‫ Microsoft Internet Explorer Multiple Vulnerabilities

IRCAD2013112980
ID: IRCAD2013112980
Release Date: 2013-11-12
Criticality level: Highly critical
Software:
Microsoft Internet Explorer 10.x
Microsoft Internet Explorer 11.x
Microsoft Internet Explorer 6.x
Microsoft Internet Explorer 7.x
Microsoft Internet Explorer 8.x
Microsoft Internet Explorer 9.x
Description:
Multiple vulnerabilities have been reported in Microsoft Internet Explorer, which can be exploited by malicious people to disclose potentially sensitive information and compromise a user's system.
1) An error when generating print previews of certain web content can be exploited to disclose any other web page currently being viewed.
2) An error when handling CSS special characters can be exploited to disclose content of another domain or Internet Explorer zone.
3) A use-after-free error when handling CAnchorElement objects can be exploited to dereference already freed memory.
4) An unspecified error can be exploited to cause memory corruption.
5) Another unspecified error can be exploited to cause memory corruption.
6) Another unspecified error can be exploited to cause memory corruption.
7) Another unspecified error can be exploited to cause memory corruption.
8) Another unspecified error can be exploited to cause memory corruption.
9) Another unspecified error can be exploited to cause memory corruption.
10) Another unspecified error can be exploited to cause memory corruption.
Successful exploitation of the vulnerabilities #3 through #‫10 allows execution of arbitrary code.
 
Solution
Apply updates.
Internet Explorer 6
Windows XP Service Pack 3Internet Explorer 6 
Windows XP Professional x64 Edition Service Pack 2Internet Explorer 6 
Windows Server 2003 Service Pack 2Internet Explorer 6 
Windows Server 2003 x64 Edition Service Pack 2Internet Explorer 6 
Windows Server 2003 with SP2 for Itanium-based SystemsInternet Explorer 6 
Internet Explorer 7
Windows XP Service Pack 3Internet Explorer 7 
Windows XP Professional x64 Edition Service Pack 2Internet Explorer 7 
Windows Server 2003 Service Pack 2Internet Explorer 7 
Windows Server 2003 x64 Edition Service Pack 2Internet Explorer 7 
Windows Server 2003 with SP2 for Itanium-based SystemsInternet Explorer 7 
Windows Vista Service Pack 2Internet Explorer 7 
Windows Vista x64 Edition Service Pack 2Internet Explorer 7 
Windows Server 2008 for 32-bit Systems Service Pack 2Internet Explorer 7 
Windows Server 2008 for x64-based Systems Service Pack 2Internet Explorer 7 
Windows Server 2008 for Itanium-based Systems Service Pack 2Internet Explorer 7 
Internet Explorer 8
Windows XP Service Pack 3Internet Explorer 8 
Windows XP Professional x64 Edition Service Pack 2Internet Explorer 8 
Windows Server 2003 Service Pack 2Internet Explorer 8 
Windows Server 2003 x64 Edition Service Pack 2Internet Explorer 8 
Windows Vista Service Pack 2Internet Explorer 8 
Windows Vista x64 Edition Service Pack 2Internet Explorer 8 
Windows Server 2008 for 32-bit Systems Service Pack 2Internet Explorer 8 
Windows Server 2008 for x64-based Systems Service Pack 2Internet Explorer 8 
Windows 7 for 32-bit Systems Service Pack 1Internet Explorer 8 
Windows 7 for x64-based Systems Service Pack 1Internet Explorer 8 
Windows Server 2008 R2 for x64-based Systems Service Pack 1Internet Explorer 8 
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1Internet Explorer 8 
Internet Explorer 9
Windows Vista Service Pack 2Internet Explorer 9 
Windows Vista x64 Edition Service Pack 2Internet Explorer 9 
Windows Server 2008 for 32-bit Systems Service Pack 2Internet Explorer 9 
Windows Server 2008 for x64-based Systems Service Pack 2Internet Explorer 9 
Windows 7 for 32-bit Systems Service Pack 1Internet Explorer 9 
Windows 7 for x64-based Systems Service Pack 1Internet Explorer 9 
Windows Server 2008 R2 for x64-based Systems Service Pack 1Internet Explorer 9 
Internet Explorer 10
Windows 7 for 32-bit Systems Service Pack 1Internet Explorer 10 
Windows 7 for x64-based Systems Service Pack 1Internet Explorer 10 
Windows Server 2008 R2 for x64-based Systems Service Pack 1Internet Explorer 10 
Windows 8 for 32-bit SystemsInternet Explorer 10 
Windows 8 for x64-based Systems Internet Explorer 10 
Windows Server 2012Internet Explorer 10 
Windows 8.1 for 32-bit SystemsInternet Explorer 11 
Windows 8.1 for x64-based Systems Internet Explorer 11
Windows Server 2012 R2Internet Explorer 11 
References:
Microsoft (KB2888505):
Secunia:
http://secunia.com/advisories/55054/

نظرات

بدون نظر
شما برای نظر دادن باید وارد شوید

نوشته

 
تاریخ ایجاد: 25 آبان 1392

امتیاز

امتیاز شما
تعداد امتیازها:0