Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

MS04-040: Internet Explorer Cummulative Update (IFRAME FIX)


  • Please log in to reply
3 replies to this topic

#1 harrywaldron

harrywaldron

    Security Reporter


  • Members
  • 509 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Roanoke, Virginia
  • Local time:08:49 PM

Posted 01 December 2004 - 04:54 PM

MS04-040: Internet Explorer Cummulative Update (IFRAME FIX)
http://www.microsoft.com/technet/security/...n/MS04-040.mspx

Microsoft Security Bulletin MS04-040
Cumulative Security Update for Internet Explorer (889293)

Impact of Vulnerability: Remote Code Execution

Maximum Severity Rating: Critical

Recommendation: Customers should install the update immediately.

Security Update Replacement: This update replaces the update that is included with Microsoft Security Bulletin MS04-038. That update is also a cumulative update.

Caveats: Microsoft Knowledge Base Article 889293 documents the currently known issues that customers may experience when they install this security update. The article also documents recommended solutions for these issues.

Technical Description:
----------------------
* HTML Elements Vulnerability - CAN-2004-1050: A remote code execution vulnerability exists in Internet Explorer that could allow remote code execution on an affected system. An attacker could exploit the vulnerability by constructing a malicious Web Page that could potentially allow remote code execution if a user visited a malicious Web site. An attacker who successfully exploited this vulnerability could take complete control of an affected system.

BC AdBot (Login to Remove)

 


#2 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,675 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:07:49 PM

Posted 01 December 2004 - 05:47 PM

Thank god...this will put a stop to a huge amount of exploits in the wild.

#3 phawgg

phawgg

    Learning Daily


  • Members
  • 4,543 posts
  • OFFLINE
  •  
  • Location:Washington State, USA
  • Local time:04:49 PM

Posted 01 December 2004 - 07:12 PM

It appears as though this update is incorporated in the SP2 already. Not available for winXP SP2. Correct?
patiently patrolling, plenty of persisant pests n' problems ...

#4 Daisuke

Daisuke

    Cleaner on Duty


  • Members
  • 5,575 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Romania
  • Local time:07:49 PM

Posted 02 December 2004 - 06:44 AM

Correct?

Correct !
Everyday is virus day. Do you know where your recovery CDs are ?
Did you create them yet ?

Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users