The table below lists the Microsoft IE OOB vulnerabilities for March.

MS Bulletin Number	Microsoft Bulletin Title	Severity	Impact of Vulnerability	Affected Software	CVE ID
MS10-018	Cumulative Security Update for Internet Explorer (980182)	Critical	Remote Code Execution	Microsoft Windows, Internet Explorer	CVE-2010-0491 CVE-2010-0492 CVE-2010-0494 CVE-2010-0806 CVE-2010-0807 CVE-2010-0489 CVE-2010-0805 CVE-2010-0267 CVE-2010-0488 CVE-2010-0490

Threat Remediation

Fortinet provides coverage on Microsoft IE OOB vulnerabilities since March 11, 2010.

CVE Number	Signature Name
CVE-2010-0491	MS.IE.HTML.Object.Ready.Memory.Corruption
CVE-2010-0492	MS.IE.HTML.Object.Css.Memory.Corruption
CVE-2010-0494	MS.IE.Iframe.Javascript.Information.Disclosure
CVE-2010-0806	MS.IE.Userdata.Behavior.Code.Execution
CVE-2010-0807	MS.IE.CSS.Overlapping.Nested.Tags
CVE-2010-0489	MS.IE.Scripts.Loading.HTML.Parsing.Memory.Corruption
CVE-2010-0805	MS.IE.Tabular.Control.DataURL.Parameter.Access
CVE-2010-0267	MS.IE.Mouse.Event.Handler.Uninitialized.Memory.Corruption
CVE-2010-0490	MS.IE.Incomplete.Element.Memory.Corruption

For more information on new and enhanced signatures, visit the IPS Service Update History. If you require more information, contact the FortiGuard Team using our Contact Us web page.

Document History

Revision Date	Version Number
Tuesday, March 30 2010	1	Initial Documentation.

Reference:

• Microsoft Security Bulletin Summary for March 30, 2010: http://www.microsoft.com/technet/security/bulletin/ms10-018.mspx