Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security VulnWatch
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Microsoft Internet Explorer Install Engine Control Buffer Overflow

from [NGSSoftware Insight Security Research] Network Security [Permanent Link]
Subject: Microsoft Internet Explorer Install Engine Control Buffer Overflow
Date: Tue, 19 Oct 2004 19:18:50 +0100 
Peter Winter-Smith of NGSSoftware has discovered a high risk
vulnerability in the Microsoft Internet Explorer Install Engine control.

Versions of Internet Explorer which are affected include:

Microsoft Internet Explorer 5.x
Microsoft Internet Explorer 6.x

This vulnerability has now been fixed by Microsoft, and a fix can be
downloaded from the Microsoft Security website:

http://www.microsoft.com/technet/security/bulletin/MS04-038.mspx

NGSSoftware are going to withhold details about this flaw for three
months. Full details will be published on the 19th of January 2005. This
three month window will allow users of Microsoft Internet Explorer the
time needed to apply the patch before the details are released to the
general public. This reflects NGSSoftware's new approach to responsible
disclosure.

This vulnerability, including many others identified and fixed by
Microsoft in this month's Cumulative Security Update, can be detected by
Typhon III - NGSSoftware's advanced vulnerability scanner.  Typhon III
will rapidly detect hosts on your network susceptible to these
vulnerabilities and enable your organisation to manage risk.

For existing Typhon III customers, please use the Typhon III update option
to include these new vulnerability checks.

For more information about Typhon III please visit NGSSoftware's website
at http://ngssoftware.com/ -  a free trial version is available for
download.

NGSSoftware Insight Security Research
http://www.databasesecurity.com/
http://www.nextgenss.com/
+44(0)208 401 0070
[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • Microsoft Internet Explorer Install Engine Control Buffer Overflow, NGSSoftware Insight Security Research <=
Previous by Date:  [VulnWatch] Regression in IE: Accessing remote/local content in IE (GM#009-IE), GreyMagic Security
Next by Date:  [VulnWatch] BindView Advisory: Memory Leak and DoS in NT4 RPC server, advisory
Previous by Thread:  [VulnWatch] Regression in IE: Accessing remote/local content in IE (GM#009-IE), GreyMagic Security
Next by Thread:  [VulnWatch] BindView Advisory: Memory Leak and DoS in NT4 RPC server, advisory
Indexes:  [Date] [Thread] [Top] [All Lists]