Microsoft Internet Explorer / Outlook Express multiple security vulnerabilities updated since 12.12.2006
Published:		13.12.2006
Source:		MICROSOFT
SecurityVulns ID:		6918
Type:		client
Level:		7/10
Description:		Memory corruption on Javascript errors processing and Javascript normalize() function. Temporary Internet Files crossite access. Buffer overflow on Windows Address Book (WAB) parsing.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document		SECUNIA, [Full-disclosure] ZDI-06-048: Microsoft Internet Explorer normalize() Function Memory Corruption Vulnerability (13.12.2006)
		SECUNIA, [Full-disclosure] Secunia Research: Internet Explorer Script Error Handling Memory Corruption (13.12.2006)
		MICROSOFT, Microsoft Security Bulletin MS06-076 Cumulative Security Update for Outlook Express (923694) (12.12.2006)
		MICROSOFT, Microsoft Security Bulletin MS06-072 (12.12.2006)

Files:		Microsoft Security Bulletin MS06-072 Cumulative Security Update for Internet Explorer (925454)
		Microsoft Security Bulletin MS06-076 Cumulative Security Update for Outlook Express (923694)
Discuss:		Read or add your comments to this news (0 comments)