Release DateAug 15, 2008 |
Severitycritical |
ImpactSystem Compromise. |
DescriptionThis indicates an attempt to exploit a remote code-execution vulnerability in Microsoft Internet Explorer.The vulnerability is due to the application's inability to properly parse a malformed web page. A successful exploit may allow execution of arbitrary code. |
Affected ProductsMicrosoft Internet Explorer 7Microsoft Internet Explorer 6 Service Pack 1 Microsoft Internet Explorer 6 Microsoft Internet Explorer 5.01 Service Pack 4 Microsoft Internet Explorer 5.01 |
Recommended ActionsApply the patch, available from the vendor's web site:http://www.microsoft.com/technet/security/Bulletin/MS08-045.mspx. |
Coverage IPS
VCM |
Common Vulnerabilities and Exposures (CVE)CVE-2008-2259 |
Reference/shttp://www.frsirt.com/english/advisories/2008/2349 (FrSIRT)http://www.microsoft.com/technet/security/Bulletin/MS08-045.mspx (MS-ID) http://www.securityfocus.com/bid/30612 (BugTraq) |