|
|
|
Credit:
The information has been provided by Microsoft Product Security.
The original article can be found at: http://www.microsoft.com/technet/security/bulletin/ms08-010.mspx
|
|
Affected Software
Operating System - Component - Maximum Security Impact - Aggregate Severity Rating - Bulletins Replaced by This Update
Internet Explorer 5.01 and Internet Explorer 6 Service Pack 1
* Microsoft Windows 2000 Service Pack 4 - Microsoft Internet Explorer 5.01 Service Pack 4 - Remote Code Execution - Critical - MS07-069
* Microsoft Windows 2000 Service Pack 4 - Microsoft Internet Explorer 6 Service Pack 1 - Remote Code Execution - Critical - MS07-069
Internet Explorer 6
* Windows XP Service Pack 2 - Microsoft Internet Explorer 6 - Remote Code Execution - Critical - MS07-069
* Windows XP Professional x64 Edition and Windows XP Professional x64 Edition Service Pack 2 - Microsoft Internet Explorer 6 - Remote Code Execution - Critical - MS07-069
* Windows Server 2003 Service Pack 1 and Windows Server 2003 Service Pack 2 - Microsoft Internet Explorer 6 - Remote Code Execution - Critical - MS07-069
* Windows Server 2003 x64 Edition and Windows Server 2003 x64 Edition Service Pack 2 - Microsoft Internet Explorer 6 - Remote Code Execution - Critical - MS07-069
* Windows Server 2003 with SP1 for Itanium-based Systems and Windows Server 2003 with SP2 for Itanium-based Systems - Microsoft Internet Explorer 6 - Remote Code Execution - Critical - MS07-069
Internet Explorer 7
* Windows XP Service Pack 2 - Windows Internet Explorer 7 - Remote Code Execution - Critical - MS07-069
* Windows XP Professional x64 Edition and Windows XP Professional x64 Edition Service Pack 2 - Windows Internet Explorer 7 - Remote Code Execution - Critical - MS07-069
* Windows Server 2003 Service Pack 1 and Windows Server 2003 Service Pack 2 - Windows Internet Explorer 7 - Remote Code Execution - Critical - MS07-069
* Windows Server 2003 x64 Edition and Windows Server 2003 x64 Edition Service Pack 2 - Windows Internet Explorer 7 - Remote Code Execution - Critical - MS07-069
* Windows Server 2003 with SP1 for Itanium-based Systems and Windows Server 2003 with SP2 for Itanium-based Systems - Windows Internet Explorer 7 - Remote Code Execution - Critical - MS07-069
* Windows Vista - Windows Internet Explorer 7 - Remote Code Execution - Critical - MS07-069
* Windows Vista x64 Edition - Windows Internet Explorer 7 - Remote Code Execution - Critical - MS07-069
Non-Affected Software
* Internet Explorer 7 on Windows Vista Service Pack 1 (all editions)
* Internet Explorer 7 on Windows Server 2008 (all editions)
HTML Rendering Memory Corruption Vulnerability - CVE-2008-0076
A remote code execution vulnerability exists in the way Internet Explorer interprets HTML with certain layout combinations. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged on user.
CVE Information:
CVE-2008-0076
Property Memory Corruption Vulnerability - CVE-2008-0077
A remote code execution vulnerability exists in the way Internet Explorer handles a property method. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged on user.
CVE Information:
CVE-2008-0077
Argument Handling Memory Corruption Vulnerability - CVE-2008-0078
A remote code execution vulnerability exists in the way Internet Explorer handles argument validation in image processing. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged on user.
CVE Information:
CVE-2008-0078
ActiveX Object Memory Corruption Vulnerability - CVE-2007-4790
A remote code execution vulnerability exists in a component of Microsoft Fox Pro. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged on user
CVE Information:
CVE-2007-4790
|
|
|
|