---------------------------------------------------------------------- Secunia CSI integrated with Microsoft WSUS and Microsoft SCCM for 3rd party Patch Management Free webinars http://secunia.com/vulnerability_scanning/corporate/webinars/ ---------------------------------------------------------------------- TITLE: Microsoft Internet Explorer Multiple Vulnerabilities SECUNIA ADVISORY ID: SA40062 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/40062/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=40062 RELEASE DATE: 2010-06-08 DISCUSS ADVISORY: http://secunia.com/advisories/40062/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/40062/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=40062 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: Multiple vulnerabilities have been reported in Microsoft Internet Explorer, which can be exploited by malicious people to conduct cross-site scripting attacks or compromise a user's system. 1) An error in the sanitisation of HTML code within the "toStaticHTML()" method can be exploited to conduct cross-site scripting attacks and potentially disclose sensitive information. Successful exploitation requires a web site that uses the "toStaticHTML" API. This vulnerability only affects the Quirk rendering mode in Internet Explorer 8. This vulnerability is related to vulnerability #1 in: SA40076 2) An unspecified error exists when accessing an object that has not been correctly initialised or that has been deleted. This can be exploited to corrupt memory e.g. if a user visits a specially crafted web page. 3) An unspecified error exists when accessing an object that has not been correctly initialised or that has been deleted in the IE8 Developer Toolbar. This can be exploited to corrupt memory e.g. if a user visits a specially crafted web page and is enticed to press the F12 key in response to a prompt. 4) Another unspecified error exists when accessing an object that has not been correctly initialised or that has been deleted in the IE8 Developer Toolbar. This can be exploited to corrupt memory e.g. if a user visits a specially crafted web page and is enticed to press the F12 key in response to a prompt. 5) An unspecified error exists when accessing an object that has not been correctly initialised or that has been deleted. This can be exploited to corrupt memory e.g. if a user visits a specially crafted web page. Successful exploitation of vulnerabilities #2 through #5 allows execution of arbitrary code. SOLUTION: Apply updates. Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ PROVIDED AND/OR DISCOVERED BY: The vendor credits: 1) Chris Weber of Casaba Security and Takeshi Terada 2) Michal Zalewski, Google Inc. 3, 4) Chris Rohlf, Matasano Security. 5) Peter Vreugdenhil, working with ZDI. ORIGINAL ADVISORY: MS10-035 (KB982381): http://www.microsoft.com/technet/security/bulletin/ms10-035.mspx OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXPLOIT: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------