TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
(MS08-073) Cumulative Security Update for Internet Explorer (958215)
Vulnerability Identifier: CVE-2008-4258; CVE-2008-4259; CVE-2008-4260; CVE-2008-4261
Discovery Date: Dec 9, 2008
Risk: Critical
Affected Software:
  • Internet Explorer 5.01 Service Pack 4 (Microsoft Windows 2000 Service Pack 4)
  • Internet Explorer 6.0 SP1
  • Microsoft Internet Explorer 5.01
  • Microsoft Internet Explorer 6 (Windows Server 2003 Service Pack 1)
  • Microsoft Internet Explorer 6 (Windows Server 2003 Service Pack 2)
  • Microsoft Internet Explorer 6 (Windows Server 2003 with SP1 for Itanium-based Systems)
  • Microsoft Internet Explorer 6 (Windows Server 2003 with SP2 for Itanium-based Systems)
  • Microsoft Internet Explorer 6 (Windows Server 2003 x64 Edition Service Pack 2)
  • Microsoft Internet Explorer 6 (Windows Server 2003 x64 Edition)
  • Microsoft Internet Explorer 6 (Windows XP Professional x64 Edition Service Pack 2)
  • Microsoft Internet Explorer 6 (Windows XP Professional x64 Edition)
  • Microsoft Internet Explorer 6 (Windows XP Service Pack 2)
  • Microsoft Internet Explorer 6 (Windows XP Service Pack 3)
  • Microsoft Internet Explorer 6 Service Pack 1 (Microsoft Windows 2000 Service Pack 4)
  • Microsoft Internet Explorer 7 (Microsoft Windows Server 2003 Service Pack 1)
  • Microsoft Internet Explorer 7 (Microsoft Windows Server 2003 Service Pack 2)
  • Microsoft Internet Explorer 7 (Microsoft Windows Server 2003 with SP1 for Itanium-based Systems)
  • Microsoft Internet Explorer 7 (Microsoft Windows Server 2003 with SP2 for Itanium-based Systems)
  • Microsoft Internet Explorer 7 (Microsoft Windows Server 2003 x64 Edition Service Pack 2)
  • Microsoft Internet Explorer 7 (Microsoft Windows Server 2003 x64 Edition)
  • Microsoft Internet Explorer 7 (Microsoft Windows Vista x64 Edition)
  • Microsoft Internet Explorer 7 (Microsoft Windows Vista)
  • Microsoft Internet Explorer 7 (Microsoft Windows XP Professional x64 Edition Service Pack 2)
  • Microsoft Internet Explorer 7 (Microsoft Windows XP Professional x64 Edition)
  • Microsoft Internet Explorer 7 (Microsoft Windows XP Service Pack 2)
  • Microsoft Internet Explorer 7 (Windows Server 2008 for 32-bit Systems)
  • Microsoft Internet Explorer 7 (Windows Server 2008 for Itanium-based Systems)
  • Microsoft Internet Explorer 7 (Windows Server 2008 for x64-based Systems)
  • Microsoft Internet Explorer 7 (Windows Vista Service Pack 1)
  • Microsoft Internet Explorer 7 (Windows Vista x64 Edition Service Pack 1)
  • Microsoft Internet Explorer 7 (Windows XP Service Pack 3)
Description:

This security update resolves four privately reported vulnerabilities, which could allow remote code execution if a user views a specially crafted Web page using Internet Explorer.

Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.


Patch Information:

Patches for this vulnerability can be downloaded on this Microsoft Web page.
 
Search for another Security Advisory
Keyword: