Microsoft Internet Explorer multiple security vulnerabilities
Published:		10.10.2007
Source:		MICROSOFT
SecurityVulns ID:		8232
Type:		client
Level:		6/10
Description:		Memory corruption, address bar spoofing.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server
		MICROSOFT : Windows Vista
CVE:		CVE-2007-3893
		CVE-2007-3892
		CVE-2007-3826 (Microsoft Internet Explorer 7 on Windows XP SP2 allows remote attackers to prevent users from leaving a site, spoof the address bar, and conduct phishing and other attacks via repeated document.open function calls after a user requests a new page, but before the onBeforeUnload function is called.)
		CVE-2007-1091 (Microsoft Internet Explorer 7 allows remote attackers to prevent users from leaving a site, spoof the address bar, and conduct phishing and other attacks via onUnload Javascript handlers.)

Original document

MICROSOFT, Microsoft Security Bulletin MS07-057 - Critical Cumulative Security Update for Internet Explorer (939653) (10.10.2007)

Files:		Microsoft Security Bulletin MS07-057 - Critical Cumulative Security Update for Internet Explorer (939653)
Discuss:		Read or add your comments to this news (0 comments)