Microsoft Security Advisory (981374)

ronjor · Mar 9, 2010

Published: March 09, 2010

Version: 1.0
General Information
Executive Summary

Microsoft is investigating new, public reports of a vulnerability in Internet Explorer 6 and Internet Explorer 7. Our investigation has shown that the latest version of the browser, Internet Explorer 8, is not affected. The main impact of the vulnerability is remote code execution. This advisory contains information about which versions of Internet Explorer are vulnerable as well as workarounds and mitigations for this issue.

Our investigation so far has shown that Internet Explorer 8 and Internet Explorer 5.01 Service Pack 4 on Microsoft Windows 2000 Service Pack 4 are not affected, and that Internet Explorer 6 Service Pack 1 on Microsoft Windows 2000 Service Pack 4, and Internet Explorer 6 and Internet Explorer 7 are vulnerable.

The vulnerability exists due to an invalid pointer reference being used within Internet Explorer. It is possible under certain conditions for the invalid pointer to be accessed after an object is deleted. In a specially-crafted attack, in attempting to access a freed object, Internet Explorer can be caused to allow remote code execution.

At this time, we are aware of targeted attacks attempting to use this vulnerability. We will continue to monitor the threat environment and update this advisory if this situation changes. On completion of this investigation, Microsoft will take the appropriate action to protect our customers, which may include providing a solution through our monthly security update release process, or an out-of-cycle security update, depending on customer needs.
Click to expand...

Microsoft

JRViejo · Mar 11, 2010

Researchers expect attacks to explode once exploit code goes public

Hackers are exploiting the just-disclosed unpatched bug in Internet Explorer (IE) to launch drive-by attacks from malicious Web sites, security researchers said today.

"This attack appears to be rather targeted at the moment, but as with other unpatched vulnerabilities in the past, this has the potential to explode now that the word is getting out," said Craig Schmugar, a threat researcher at McAfee, in a blog post today.

Attacks are launched from Web sites in a classic drive-by fashion, said Schmugar and others. "Visiting the page is enough to get infected," Schmugar said.
Click to expand...

Hackers exploit latest IE zero-day with drive-by attacks By Gregg Keizer.

elapsed · Mar 11, 2010

Yet ANOTHER reason to update, what d'ya know!

Thankful · Mar 12, 2010

Update on Security Advisory 981374:
http://blogs.technet.com/msrc/archive/2010/03/12/update-on-security-advisory-981374.aspx

progress · Mar 21, 2010

http://secunia.com/advisories/38860

Log in or Sign up

Microsoft Security Advisory (981374)

ronjor Global Moderator

JRViejo Super Moderator

elapsed Registered Member

Thankful Savings Monitor

progress Guest

Log in or Sign up

Microsoft Security Advisory (981374)

ronjor Global Moderator

JRViejo Super Moderator

elapsed Registered Member

Thankful Savings Monitor

progress Guest

Useful Searches