Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


MS04-040: Internet Explorer Cummulative Update (IFRAME FIX)

  • Please log in to reply
3 replies to this topic

#1 harrywaldron


    Security Reporter

  • Members
  • 509 posts
  • Gender:Male
  • Location:Roanoke, Virginia
  • Local time:08:49 PM

Posted 01 December 2004 - 04:54 PM

MS04-040: Internet Explorer Cummulative Update (IFRAME FIX)

Microsoft Security Bulletin MS04-040
Cumulative Security Update for Internet Explorer (889293)

Impact of Vulnerability: Remote Code Execution

Maximum Severity Rating: Critical

Recommendation: Customers should install the update immediately.

Security Update Replacement: This update replaces the update that is included with Microsoft Security Bulletin MS04-038. That update is also a cumulative update.

Caveats: Microsoft Knowledge Base Article 889293 documents the currently known issues that customers may experience when they install this security update. The article also documents recommended solutions for these issues.

Technical Description:
* HTML Elements Vulnerability - CAN-2004-1050: A remote code execution vulnerability exists in Internet Explorer that could allow remote code execution on an affected system. An attacker could exploit the vulnerability by constructing a malicious Web Page that could potentially allow remote code execution if a user visited a malicious Web site. An attacker who successfully exploited this vulnerability could take complete control of an affected system.

BC AdBot (Login to Remove)


#2 Grinler


    Lawrence Abrams

  • Admin
  • 43,675 posts
  • Gender:Male
  • Location:USA
  • Local time:07:49 PM

Posted 01 December 2004 - 05:47 PM

Thank god...this will put a stop to a huge amount of exploits in the wild.

#3 phawgg


    Learning Daily

  • Members
  • 4,543 posts
  • Location:Washington State, USA
  • Local time:04:49 PM

Posted 01 December 2004 - 07:12 PM

It appears as though this update is incorporated in the SP2 already. Not available for winXP SP2. Correct?
patiently patrolling, plenty of persisant pests n' problems ...

#4 Daisuke


    Cleaner on Duty

  • Members
  • 5,575 posts
  • Gender:Male
  • Location:Romania
  • Local time:07:49 PM

Posted 02 December 2004 - 06:44 AM


Correct !
Everyday is virus day. Do you know where your recovery CDs are ?
Did you create them yet ?

Posted Image

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users