Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
SecuriTeam™  Beyond Security®  SecuriTeam™ Home  Ask the Team  Mailing Lists  Advertising Info  Blogs SecuriTeam™ in Your Inbox   E-mail this CVE-2008-0076 to a friend New vulnerability? New tool? Tell us	CVE-2008-0076 Cumulative Security Update for Internet Explorer (MS08-010)     Credit: The information has been provided by Microsoft Product Security. The original article can be found at: http://www.microsoft.com/technet/security/bulletin/ms08-010.mspx Website Security Scan Code Vulnerability Test Network Assessment Tool Detect hidden vulnerabilities Exhaustive automated testing Real-time, continuous security Get guidance from professionals of internal or 3rd party code. scanning for your entire network    CVE-2008-0076 Details Check for CVE-2008-0076 Vulnerability Assessment and Management. Automated Pen Testing for 50 to 50,000 nodes beyondsecurity.com/vulnerability-scanner Affected Software Operating System - Component - Maximum Security Impact - Aggregate Severity Rating - Bulletins Replaced by This Update Internet Explorer 5.01 and Internet Explorer 6 Service Pack 1  * Microsoft Windows 2000 Service Pack 4 - Microsoft Internet Explorer 5.01 Service Pack 4 - Remote Code Execution - Critical - MS07-069  * Microsoft Windows 2000 Service Pack 4 - Microsoft Internet Explorer 6 Service Pack 1 - Remote Code Execution - Critical - MS07-069 Internet Explorer 6  * Windows XP Service Pack 2 - Microsoft Internet Explorer 6 - Remote Code Execution - Critical - MS07-069  * Windows XP Professional x64 Edition and Windows XP Professional x64 Edition Service Pack 2 - Microsoft Internet Explorer 6 - Remote Code Execution - Critical - MS07-069  * Windows Server 2003 Service Pack 1 and Windows Server 2003 Service Pack 2 - Microsoft Internet Explorer 6 - Remote Code Execution - Critical - MS07-069  * Windows Server 2003 x64 Edition and Windows Server 2003 x64 Edition Service Pack 2 - Microsoft Internet Explorer 6 - Remote Code Execution - Critical - MS07-069  * Windows Server 2003 with SP1 for Itanium-based Systems and Windows Server 2003 with SP2 for Itanium-based Systems - Microsoft Internet Explorer 6 - Remote Code Execution - Critical - MS07-069 Internet Explorer 7  * Windows XP Service Pack 2 - Windows Internet Explorer 7 - Remote Code Execution - Critical - MS07-069  * Windows XP Professional x64 Edition and Windows XP Professional x64 Edition Service Pack 2 - Windows Internet Explorer 7 - Remote Code Execution - Critical - MS07-069  * Windows Server 2003 Service Pack 1 and Windows Server 2003 Service Pack 2 - Windows Internet Explorer 7 - Remote Code Execution - Critical - MS07-069  * Windows Server 2003 x64 Edition and Windows Server 2003 x64 Edition Service Pack 2 - Windows Internet Explorer 7 - Remote Code Execution - Critical - MS07-069  * Windows Server 2003 with SP1 for Itanium-based Systems and Windows Server 2003 with SP2 for Itanium-based Systems - Windows Internet Explorer 7 - Remote Code Execution - Critical - MS07-069  * Windows Vista - Windows Internet Explorer 7 - Remote Code Execution - Critical - MS07-069  * Windows Vista x64 Edition - Windows Internet Explorer 7 - Remote Code Execution - Critical - MS07-069 Non-Affected Software  * Internet Explorer 7 on Windows Vista Service Pack 1 (all editions)  * Internet Explorer 7 on Windows Server 2008 (all editions) HTML Rendering Memory Corruption Vulnerability - CVE-2008-0076 A remote code execution vulnerability exists in the way Internet Explorer interprets HTML with certain layout combinations. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged on user. CVE Information: CVE-2008-0076 Property Memory Corruption Vulnerability - CVE-2008-0077 A remote code execution vulnerability exists in the way Internet Explorer handles a property method. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged on user. CVE Information: CVE-2008-0077 Argument Handling Memory Corruption Vulnerability - CVE-2008-0078 A remote code execution vulnerability exists in the way Internet Explorer handles argument validation in image processing. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged on user. CVE Information: CVE-2008-0078 ActiveX Object Memory Corruption Vulnerability - CVE-2007-4790 A remote code execution vulnerability exists in a component of Microsoft Fox Pro. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged on user CVE Information: CVE-2007-4790  Comments on CVE-2008-0076:  Add new comment:  Subject:  Name/Nick/Email:          Chars Left:
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

Copyright © 1998-2017 Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®