National Cyber Alert System
http://www.us-cert.gov/cas/techalerts/TA10-021A.html
Technical Cyber Security Alert TA10-021A
Microsoft Internet Explorer Vulnerabilities
Original release date: January 21, 2010
Last revised: --
Source: US-CERT
Systems Affected
- Microsoft Internet Explorer
Overview
Microsoft has released out-of-band updates to address critical
vulnerabilities in Internet Explorer.
I. Description
Microsoft has released updates for multiple vulnerabilities in Internet
Explorer, including the vulnerability detailed in Microsoft Security Advisory 979352
and US-CERT Vulnerability Note VU#49251.
II. Impact
By convincing a user to view a specially crafted HTML document or Microsoft
Office document, an attacker may be able to execute arbitrary code with the
privileges of the user.
III. Solution
Apply updates Microsoft has released updates to
address these vulnerabilities. Please see Microsoft Security Bulletin MS10-002
for more information. Apply workarounds Microsoft
has provided workarounds for some of the vulnerabilities in MS10-002.
IV. References
|
