Multiple Internet Explorer bugs updated since 13.10.2004
Published:		20.01.2005
Source:		MICROSOFT
SecurityVulns ID:		4091
Type:		client
Level:		9/10
Description:		CSS buffer overflow, local zone scripting, buffer overflow in Install Engine, writing file to any location with drag and drop or scripting in <img> tag, address bar spoofing, SSL crossite scripting.

Affected:		MICROSOFT : Internet Explorer 5.5
		MICROSOFT : Internet Explorer 6.0

Original document		NGSSoftware Insight Security Research, Microsoft Internet Explorer Install Engine Control Buffer Overflow (#NISR19012005a) (20.01.2005)
		NGSSoftware Insight Security Research, MSN Heartbeat Control Buffer Overflow (20.01.2005)
		CERT, US-CERT Technical Cyber Security Alert TA04-293A -- Multiple Vulnerabilities in Microsoft Internet Explorer (22.10.2004)
		NGSSoftware Insight Security Research Advisory (NISR), MSN Gaming Heartbeat Component Buffer Overflow (15.10.2004)
		ACROS Security, ACROS Security: Poisoning Cached HTTPS Documents in Internet Explorer (13.10.2004)
		NGSSoftware Insight Security Research Advisory (NISR), Microsoft Internet Explorer Install Engine Control Buffer Overflow (13.10.2004)
		MICROSOFT, Microsoft Security Bulletin MS04-038 Cumulative Security Update for Internet Explorer (834707) (13.10.2004)

Files:		Buffer Overflow In Internet Explorer CSS Parsing (mshtml.dll) exploit
		Microsoft Security Bulletin MS04-038 Cumulative Security Update for Internet Explorer (834707)
Discuss:		Read or add your comments to this news (0 comments)