标题: 微软WINDOWS 矢量可标记语言（VML）缓冲溢出 [打印本页]

---

作者: pioneer     时间: 2007-8-16 09:53    标题: 微软WINDOWS 矢量可标记语言（VML）缓冲溢出

来源

secunia.com

操作系统

Microsoft Windows 2000 Professional

Microsoft Windows 2000 Datacenter Server

Microsoft Windows 2000 Advanced Server

Microsoft Windows 2000 Server

Microsoft Windows XP Home Edition

Microsoft Windows XP Professional

Microsoft Windows Server 2003 Datacenter Edition

Microsoft Windows Server 2003 Enterprise Edition

Microsoft Windows Server 2003 Standard Edition

Microsoft Windows Server 2003 Web Edition

Microsoft Windows Storage Server 2003

Microsoft Windows Vista

软件名

Microsoft Internet Explorer 5.01

Microsoft Internet Explorer 6.x

Microsoft Internet Explorer 7.x

描述

这可被恶意用来危害用户系统。
VML(vgx.dll)实行时的越界错误使得使用IE的用户在浏览恶意网址时在执行VML时会导致缓冲溢出
溢出成功后允许执行任意代码

解决方案

应用补丁
Internet Explorer 5.01 SP4 for Windows 2000 SP4:
http://www.microsoft.com/downloa ... 7-8AE6-DD7FCF89D477

Internet Explorer 6 SP1 for Windows 2000 SP4:
http://www.microsoft.com/downloa ... F-824E-757482517612

Internet Explorer 6 for Windows XP SP2:
http://www.microsoft.com/downloa ... 0-9DAE-C243CE657FB7

Internet Explorer 6 for Windows XP Professional x64 Edition
(optionally with SP2):
http://www.microsoft.com/downloa ... 5-AEAB-0EBF1643A5FD

Internet Explorer 6 for Windows Server 2003 SP1/SP2:
http://www.microsoft.com/downloa ... 0-B3AB-8CD6D8CDD13C

Internet Explorer 6 for Windows Server 2003 x64 Edition (optionally
with SP2):
http://www.microsoft.com/downloa ... 1-BD6F-E5D23EEDBC6B

Internet Explorer 6 for Windows Server 2003 for Itanium-based systems
SP1/SP2:
http://www.microsoft.com/downloa ... 1-9E4B-0CB6BF3D2CB1

Internet Explorer 7 for Windows XP SP2:
http://www.microsoft.com/downloa ... E-8A96-9421A0C52C9F

Internet Explorer 7 for Windows XP Professional x64 Edition
(optionally with SP2):
http://www.microsoft.com/downloa ... 7-868A-EC70DA737C21

Internet Explorer 7 for Windows Server 2003 SP1/SP2:
http://www.microsoft.com/downloa ... A-8A31-8182EA2D24DB

Internet Explorer 7 for Windows Server 2003 x64 Edition (optionally
with SP2):
http://www.microsoft.com/downloa ... C-92A0-138CB57FE2B5

Internet Explorer 7 for Windows Server 2003 with SP1/SP2 for
Itanium-based systems:
http://www.microsoft.com/downloa ... 8-81A1-53D46F2DE973
   
Internet Explorer 7 for Windows Vista:
http://www.microsoft.com/downloa ... 6-AAAA-01F5F37C9143

Internet Explorer 7 for Windows Vista x64 Edition:
http://www.microsoft.com/downloa ... 4-BD8A-4A2D829DC1A1

---

欢迎光临 微点交流论坛 (http://bbs.micropoint.com.cn/)

bbs.micropoint.com.cn