Description:

New  vulnerability has been reported in Internet Explorer, which can
be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an unspecified error. This can be
exploited to execute arbitrary code on a user's system by e.g.
tricking the user to visit a malicious website that hosts a specially
crafted WMF file or via an email message containing a specially
crafted attachment.

The vulnerability has been reported in the following versions:
* Internet Explorer 5.01 Service Pack 4 on Microsoft Windows 2000
Service Pack 4
* Internet Explorer 5.5 Service Pack 2 on Microsoft Windows Millennium.

The vulnerability does not affect the following versions of Windows:
* Windows XP Service Pack 1
* Windows XP Service Pack 2
* Windows XP Professional x64 Edition
* Windows Server 2003
* Windows Server 2003 Service Pack 1
* Windows Server 2003 for Itanium-based Systems
* Windows Server 2003 with Service Pack 1 for Itanium-based Systems
* Windows Server 2003 x64 Edition

NOTE: The vulnerability may also be exploitable through other
applications handling WMF images.

Solution:
The vendor recommends users to install Internet Explorer 6 SP1, which
is unaffected.
http://www.microsoft.com/windows...ads/critical/ie6sp1/default.mspx
http://secunia.com/advisories/18729/






SPONSORED LINKS
Computer security Communication and networking Computer memory
Computer training


YAHOO! GROUPS LINKS




Reply via email to