فا

‫ Microsoft Internet Explorer Multiple Vulnerabilities

IRCAD2013082841
ID: IRCAD2013082841
Release Date: 2013-08-13
Criticality level: Highly critical
 
Software:
Microsoft Internet Explorer 10.x
Microsoft Internet Explorer 6.x
Microsoft Internet Explorer 7.x
Microsoft Internet Explorer 8.x
Microsoft Internet Explorer 9.x
 
Description:
Multiple vulnerabilities have been reported in Microsoft Internet Explorer, which can be exploited by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, and compromise a user's system.
1) An error when handling process integrity level assignments can be exploited to run a process at elevated integrity levels.
2) An error when handling the EUC-JP character encoding can be exploited to conduct cross-site scripting attacks.
3) An unspecified error can be exploited to cause memory corruption.
4) Another unspecified error can be exploited to cause memory corruption.
5) Another unspecified error can be exploited to cause memory corruption.
6) Another unspecified error can be exploited to cause memory corruption.
7) Another unspecified error can be exploited to cause memory corruption.
8) Another unspecified error can be exploited to cause memory corruption.
9) Another unspecified error can be exploited to cause memory corruption.
10) Another unspecified error can be exploited to cause memory corruption.
11) Another unspecified error can be exploited to cause memory corruption.
Successful exploitation of the vulnerabilities #3 through #‫11 allows execution of arbitrary code.
 
Solution
Apply updates.
 
Internet Explorer 6
Windows XP Service Pack 3
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems
Internet Explorer 7
Windows XP Service Pack 3
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-based Systems Service Pack 2
 
Internet Explorer 8
Windows XP Service Pack 3
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
 
Internet Explorer 9
Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
 
Internet Explorer 10
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 8 for 32-bit Systems
Windows 8 for 64-bit Systems
Windows Server 2012
 
References:
Microsoft (KB2862772):
 
Secunia:
 

نظرات

بدون نظر
شما برای نظر دادن باید وارد شوید

نوشته

 
تاریخ ایجاد: 27 مرداد 1392

امتیاز

امتیاز شما
تعداد امتیازها: 0