漏洞信息详情
Microsoft Internet Explorer安全漏洞
漏洞简介
Microsoft Internet Explorer(IE)是美国微软(Microsoft)公司的一款Windows操作系统附带的Web浏览器。
Microsoft Internet Explorer是一款流行的WEB浏览器。Microsoft Internet Explorer帮助控件存在问题,远程攻击者可以利用这个漏洞绕过本地安全域限制。利用MSIE帮助控件,建立恶意页面,诱使用户访问,可以导致绕过本地安全域检查,以高权限执行任意脚本内容。
漏洞公告
厂商补丁:
Microsoft
---------
Microsoft已经为此发布了一个安全公告(MS05-001)以及相应补丁:
MS05-001:Vulnerability in HTML Help Could Allow Code Execution (890175)
链接:
http://www.microsoft.com/technet/security/bulletin/MS05-001.mspx" target="_blank">
http://www.microsoft.com/technet/security/bulletin/MS05-001.mspx
补丁下载:
Microsoft Windows 2000 Service Pack 3 and Microsoft Windows 2000 Service Pack 4
http://www.microsoft.com/downloads/details.aspx?FamilyId=BE1B11C0-EF09-4295-8FB2-0FF17BA65460" target="_blank">
http://www.microsoft.com/downloads/details.aspx?FamilyId=BE1B11C0-EF09-4295-8FB2-0FF17BA65460
Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
http://www.microsoft.com/downloads/details.aspx?FamilyId=43201B00-298D-4C0C-A26F-AAEDF163FEB7" target="_blank">
http://www.microsoft.com/downloads/details.aspx?FamilyId=43201B00-298D-4C0C-A26F-AAEDF163FEB7
Microsoft Windows XP 64-Bit Edition Service Pack 1
http://www.microsoft.com/downloads/details.aspx?FamilyId=1FC58C5F-3A97-4B89-96C3-AAEFFCE28535" target="_blank">
http://www.microsoft.com/downloads/details.aspx?FamilyId=1FC58C5F-3A97-4B89-96C3-AAEFFCE28535
Microsoft Windows XP 64-Bit Edition Version 2003
http://www.microsoft.com/downloads/details.aspx?FamilyId=3B3878C9-57FB-45A9-B5C2-234AD538D6CC" target="_blank">
http://www.microsoft.com/downloads/details.aspx?FamilyId=3B3878C9-57FB-45A9-B5C2-234AD538D6CC
Microsoft Windows Server 2003
http://www.microsoft.com/downloads/details.aspx?FamilyId=23E619FE-F6DB-4666-A247-339F55B059CC" target="_blank">
http://www.microsoft.com/downloads/details.aspx?FamilyId=23E619FE-F6DB-4666-A247-339F55B059CC
Microsoft Windows Server 2003 64-Bit Edition
http://www.microsoft.com/downloads/details.aspx?FamilyId=3B3878C9-57FB-45A9-B5C2-234AD538D6CC" target="_blank">
http://www.microsoft.com/downloads/details.aspx?FamilyId=3B3878C9-57FB-45A9-B5C2-234AD538D6CC
参考网址
来源:CERT-VN
链接:http://www.kb.cert.org/vuls/id/972415
来源:XF
链接:https://exchange.xforce.ibmcloud.com/vulnerabilities/18311
来源:MS
链接:https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-001
来源:BUGTRAQ
链接:http://archives.neohapsis.com/archives/bugtraq/2004-12/0426.html
来源:OVAL
链接:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2830
来源:OVAL
链接:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1963
来源:OVAL
链接:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1349
来源:CERT
链接:http://www.us-cert.gov/cas/techalerts/TA05-012B.html
来源:OVAL
链接:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3496
受影响实体
- Microsoft Windows_xp:Sp2:Tablet_pc<!--2000-1-1-->
- Microsoft Ie:6.0<!--2000-1-1-->
补丁
暂无
还没有评论,来说两句吧...