正文

Microsoft Internet Explorer安全漏洞

admin
admin V管理员 /0 评论 /7 阅读
1231
此篇文章发布距今已超过1283天，您需要注意文章的内容或图片是否可用！

漏洞信息详情

Microsoft Internet Explorer安全漏洞

  • CNNVD编号：CNNVD-200411-024
    • <!--
  • 危害等级： 超危-->
  • 危害等级： 超危
  • CVE编号： CVE-2004-0216
  • 漏洞类型： 其他
  • 发布时间： 2004-10-12
  • 威胁类型： 远程
  • 更新时间： 2021-07-27
  • 厂        商： microsoft
  • 漏洞来源： Peter Winter-Smith...

漏洞简介

Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司的一款Windows操作系统附带的Web浏览器。

Microsoft Internet Explorer是一款流行的WEB浏览器。Microsoft Internet Explorer的inseng.dll存在缓冲区溢出问题，远程攻击者可以利用这个漏洞以IE进程权限在系统上执行任意指令。所有Microsoft windows包含Microsoft Active Setup/Install引擎组件，这些组件被标记安全并默认可从任何WEB页调用。当调用由Active Setup控件ActiveX组件\'\'asctrls.ocx\'\'提供的SetCifFile()方法时，如果第一个参数(.cab文件名)字符串长度超过2kb，那么当计算缓冲区空间以允许拷贝\'\'base url\'\'时可发生整数溢出。问题代码存在于Active Setup控件提供的安装引擎控件模块(\'\'inseng.dll\'\')中，相关代码如下：MOV EBX，DWORD PTR DS：[＜＆KERNEL32.lstrcpynA＞] ; kernel32.lstrcpynA() ...PUSH DWORD PTR SS：[EBP+C] ; /String = Cab file nameAND BYTE PTR DS：[ESI]，0 ; |CALL DWORD PTR DS：[＜＆KERNEL32.lstrlenA＞] ; lstrlenA()MOV ECX，822 ; Max buffer sizeSUB ECX，EAX ; Calculate remaining buffer space - integer overflow!PUSH ECX ; /n = Unchecked value - remaining buffer space!PUSH DWORD PTR SS：[EBP-8] ; |String2 = BaseURL property valuePUSH ESI ; |String1 = 0x822 bytes heap bufferCALL EBX ; lstrcpynA()MOV EDI，DWORD PTR DS：[＜＆KERNEL32.lstrcatA＞] ; kernel32.lstrcatA()PUSH inseng.66561C84 ; /StringToAdd = \"/\"PUSH ESI ; |ConcatString = Our heap bufferCALL EDI ; lstrcatA()PUSH DWORD PTR SS：[EBP+C] ; /StringToAdd = Our Cab file namePUSH ESI ; |ConcatString = Our heap bufferCALL EDI ; lstrcatA()

漏洞公告

厂商补丁：

Microsoft

---------

Microsoft已经为此发布了一个安全公告(MS04-038)以及相应补丁:

MS04-038：Cumulative Security Update for Internet Explorer (834707)

链接：

http://www.microsoft.com/technet/security/bulletin/MS04-038.mspx" target="_blank">

http://www.microsoft.com/technet/security/bulletin/MS04-038.mspx

补丁下载：

Internet Explorer 5.01 Service Pack 3 on Windows 2000 SP3

http://www.microsoft.com/downloads/details.aspx?FamilyId=2D8E8E97-4946-4994-924B-1FB1DC1881BA&displaylang=en" target="_blank">

http://www.microsoft.com/downloads/details.aspx?FamilyId=2D8E8E97-4946-4994-924B-1FB1DC1881BA&displaylang=en

Internet Explorer 5.01 Service Pack 4 on Windows 2000 SP4

http://www.microsoft.com/downloads/details.aspx?FamilyId=72DBE239-AF0A-42B5-B88C-A00371F6EC81&displaylang=en" target="_blank">

http://www.microsoft.com/downloads/details.aspx?FamilyId=72DBE239-AF0A-42B5-B88C-A00371F6EC81&displaylang=en

Internet Explorer 5.5 Service Pack 2 on Microsoft Windows Me

http://www.microsoft.com/downloads/details.aspx?FamilyId=BE27F77C-3C2D-45F1-86DF-2B71799DA169&displaylang=en" target="_blank">

http://www.microsoft.com/downloads/details.aspx?FamilyId=BE27F77C-3C2D-45F1-86DF-2B71799DA169&displaylang=en

Internet Explorer 6 on Windows XP

http://www.microsoft.com/downloads/details.aspx?FamilyId=A89CFBE8-C299-415D-A9D6-7CC6429C547D&displaylang=en" target="_blank">

http://www.microsoft.com/downloads/details.aspx?FamilyId=A89CFBE8-C299-415D-A9D6-7CC6429C547D&displaylang=en

Internet Explorer 6 Service Pack 1 on Microsoft Windows 2000 Service Pack 3, on Microsoft Windows 2000 Service Pack 4, on Microsoft Windows XP, or on Microsoft Windows XP Service Pack 1

http://www.microsoft.com/downloads/details.aspx?FamilyId=7C1404E6-F5D4-4FED-9573-DD83F2DFF074&displaylang=en" target="_blank">

http://www.microsoft.com/downloads/details.aspx?FamilyId=7C1404E6-F5D4-4FED-9573-DD83F2DFF074&displaylang=en

Internet Explorer 6 Service Pack 1 on Microsoft Windows NT Server 4.0 Service Pack 6a, on Microsoft Windows NT Server 4.0 Terminal Service Edition Service Pack 6, on Microsoft Windows 98, on Microsoft Windows 98 SE, or on Microsoft Windows Me

http://www.microsoft.com/downloads/details.aspx?FamilyId=DE8D94C4-7F58-4CE7-B8BD-51CFD795B03E&displaylang=en" target="_blank">

http://www.microsoft.com/downloads/details.aspx?FamilyId=DE8D94C4-7F58-4CE7-B8BD-51CFD795B03E&displaylang=en

Internet Explorer 6 for Windows XP Service Pack 1 (64-Bit Edition)

http://www.microsoft.com/downloads/details.aspx?FamilyId=C05103E8-4402-4D54-BA03-FBBC24142E4D&displaylang=en" target="_blank">

http://www.microsoft.com/downloads/details.aspx?FamilyId=C05103E8-4402-4D54-BA03-FBBC24142E4D&displaylang=en

Internet Explorer 6 for Windows Server 2003

http://www.microsoft.com/downloads/details.aspx?FamilyId=19E69E5F-9C98-49AD-A61F-4F82A4014412&displaylang=en" target="_blank">

http://www.microsoft.com/downloads/details.aspx?FamilyId=19E69E5F-9C98-49AD-A61F-4F82A4014412&displaylang=en

Internet Explorer 6 for Windows Server 2003 64-Bit Edition and Windows XP 64-Bit Edition Version 2003

http://www.microsoft.com/downloads/details.aspx?FamilyId=566C2A05-2513-4E30-A3EA-87D4BF7F9730&displaylang=en" target="_blank">

http://www.microsoft.com/downloads/details.aspx?FamilyId=566C2A05-2513-4E30-A3EA-87D4BF7F9730&displaylang=en

Internet Explorer 6 for Windows XP Service Pack 2

http://www.microsoft.com/downloads/details.aspx?FamilyId=CF47B515-3F51-43E1-9246-2C2264C49E2E&displaylang=en" target="_blank">

http://www.microsoft.com/downloads/details.aspx?FamilyId=CF47B515-3F51-43E1-9246-2C2264C49E2E&displaylang=en

参考网址

来源:XF

链接:https://exchange.xforce.ibmcloud.com/vulnerabilities/17651

来源:OVAL

链接:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5316

来源:XF

链接:https://exchange.xforce.ibmcloud.com/vulnerabilities/17620

来源:OVAL

链接:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6600

来源:BUGTRAQ

链接:http://marc.info/?l=bugtraq&m=110616383332055&w=2

来源:OVAL

链接:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7865

来源:OVAL

链接:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7717

来源:CERT

链接:http://www.us-cert.gov/cas/techalerts/TA04-293A.html

来源:OVAL

链接:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5329

来源:CERT-VN

链接:http://www.kb.cert.org/vuls/id/637760

来源:MS

链接:https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038

来源:OVAL

链接:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6100

来源:NTBUGTRAQ

链接:http://marc.info/?l=ntbugtraq&m=110619893620517&w=2

来源:BUGTRAQ

链接:http://marc.info/?l=bugtraq&m=109760693512754&w=2

来源:MISC

链接:http://www.ngssoftware.com/advisories/msinsengfull.txt

受影响实体

  • Microsoft Ie:6:Windows_server_2003_sp1  
    <!--
    2000-1-1
    -->
  • Microsoft Ie:5.5  
    <!--
    2000-1-1
    -->
  • Microsoft Ie:5.01  
    <!--
    2000-1-1
    -->

补丁

    暂无