Microsoft Internet Explorer multiple bugs updated since 21.08.2003
Published:		09.09.2003
Source:		MICROSOFT
SecurityVulns ID:		3065
Type:		client
Level:		10/10
Description:		New rollaup fix released: crossite scripting, buffer overflow during <OBJECT> tag parsing, temporary internet files path disclosure, code execution via OBJECT tag.

Affected:		MICROSOFT : Internet Explorer 5.01
		MICROSOFT : Internet Explorer 5.5
		MICROSOFT : Internet Explorer 6.0

Original document		GreyMagic Software, Re: BAD NEWS: Microsoft Security Bulletin MS03-032 (09.09.2003)
		morning_wood, Re: [Full-Disclosure] BAD NEWS: Microsoft Security Bulletin MS03-032 (08.09.2003)
		http-equiv_(at)_excite.com, [Full-Disclosure] BAD NEWS: Microsoft Security Bulletin MS03-032 (08.09.2003)
		CERT, CERT Advisory CA-2003-22 Multiple Vulnerabilities in Microsoft Internet Explorer (27.08.2003)
		EEYE, EEYE: Internet Explorer Object Data Remote Execution Vulnerability (21.08.2003)
		SECURITEAM, [NT] Internet Explorer Object Type Buffer Overflow in Double-Byte Character Set Environment (21.08.2003)
		SECURITEAM, [NT] The Return of the Content-Disposition Vulnerability in IE (21.08.2003)
		MICROSOFT, Microsoft Security Bulletin MS03-032: Cumulative Patch for Internet Explorer (Q822925) (21.08.2003)

Files:		Internet Explorer <OBJECT> code execution PoC "webserver"
Discuss:		Read or add your comments to this news (0 comments)