Content

(MS08-045) Microsoft Component Handling Memory Corruption Vulnerability (953838)

Type
Logic error
Impact of exploitation
Remote Code Execution
User Interaction
user interaction is needed
Attack Vector
Website with malicious content
Rating
Medium
CVE reference
CVE-2008-2259 ,
Vendor Status
Responded and patched
Vulnerable systems
Internet Explorer  5.01 SP4,
Internet Explorer  6 SP1,
Internet Explorer  7,
Summary
A vulnerability is present in Microsoft Internet Explorer that may allow for code execution attacks. Exploitation could occur when visiting a malicious Web site.

Tab Navigation

Description

Microsoft Internet Explorer is an industry standard Web browser application. A vulnerability exists in Microsoft Internet Explorer that may allow for code execution attacks. The flaw lies in processing of print preview arguments. Successful exploitation would allow code execution at the rights level of the victim.

McAfee Product Mitigation & Recommendations

Recommendations

Download and install the patch available from Microsoft (953838): http://www.microsoft.com/technet/security/Bulletin/MS08-045.mspx

McAfee Product Mitigation

McAfee Foundstone

This Foundstone vulnerability check can be used to assess if your systems are vulnerable and is expected to accurately identify if a system is vulnerable in many enterprise environments.

Signature:
(MS08-045) Microsoft Component Handling Memory Corruption Vulnerability (953838)
Signature identifier:
6057
Release date:
8/12/2008

Additional Resources

Microsoft Security Bulletin: Cumulative Security Update for Internet Explorer (953838)

http://www.microsoft.com/technet/security/Bulletin/MS08-045.mspx

All Information

Timeline -

8/12/2008

Vendor has provided a patch.

Description -

Microsoft Internet Explorer is an industry standard Web browser application. A vulnerability exists in Microsoft Internet Explorer that may allow for code execution attacks. The flaw lies in processing of print preview arguments. Successful exploitation would allow code execution at the rights level of the victim.

McAfee Product Mitigation & Recommendations

Recommendations -

Download and install the patch available from Microsoft (953838): http://www.microsoft.com/technet/security/Bulletin/MS08-045.mspx

McAfee Product Mitigation

McAfee Foundstone

This Foundstone vulnerability check can be used to assess if your systems are vulnerable and is expected to accurately identify if a system is vulnerable in many enterprise environments.

Signature:
(MS08-045) Microsoft Component Handling Memory Corruption Vulnerability (953838)
Signature identifier:
6057
Release date:
8/12/2008

Additional Resources

Additional Resources -

Microsoft Security Bulletin: Cumulative Security Update for Internet Explorer (953838)

http://www.microsoft.com/technet/security/Bulletin/MS08-045.mspx