CERT-MU Vulnerability Note VN-2009-20
Microsoft Internet Explorer Memory Corruption vulnerabilities
Original Issue Date: July 29, 2009
Severity Rating: High
Affected Softwares
- Windows 2000 SP4 and prior
- Windows XP SP3 and prior
- Windows XP Professional x64 Edition SP2 and prior
- Windows Server 2003 SP2 and prior
- Windows Server 2003 x64 Edition SP2 and prior
- Windows Server 2003 for Itanium-based Systems SP2 and prior
- Windows Vista SP2 and prior
- Windows Vista x64 Edition SP2 and prior
- Windows Server 2008 for 32-bit Systems SP2 and prior
- Windows Server 2008 for x64-based Systems SP2 and prior
- Windows Server 2008 for Itanium-based Systems SP2 and prior
Component Affected
- Internet Explorer 5.01 SP4 and prior
- Internet Explorer 6 SP2 and prior
- Internet Explorer 7
- Internet Explorer 8
Overview
Multiple vulnerabilities have been reported in Microsoft Active Template Library (ATL). Successful exploitation of these vulnerabilities could allow an attacker to execute an arbitrary code and take complete control of the affected system or cause the Information disclosure.
Overview
Multiple vulnerabilities have been reported in Microsoft Internet Explorer.
By convincing a user to view a specially crafted HTML document (e.g., a Web page, HTML email message, or HTML attachment), an attacker may be able to execute arbitrary code. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user.
Description
|
