|
|
Info |
Last Modified |
| 8 months ago |
|
|
|
|
Description |
Microsoft IE contains a flaw that may allow a malicious user to gain the same user rights as the logged in user. The issue is triggered when IE parses certain strings in CSS. It is possible for a malacious person to construct a specially crafted website which could remotely execute code on the visitor's computer.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Other
Impact:
Loss of Integrity
Exploit:
Exploit Unknown
Disclosure:
OSVDB Verified
|
|
Solution |
Upgrade to IE version 6 or 7, as it has been reported to fix this vulnerability. Additionally, the vendor has released the MS07-045 cummulative security update to address this issue. Otherwise, users may opt to apply the following workaround: do not browse untrusted websites.
|
|
Products |
|
Internet Explorer for Windows
 |
5.0.1 SP4 |
|
|
|
|
|
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
