» 游客:  注册 | 登录 | 帮助  微点交流论坛 » 漏洞快报 » 微软WINDOWS 矢量可标记语言（VML）缓冲溢出   作者: 标题: 微软WINDOWS 矢量可标记语言（VML）缓冲溢出 pioneer 超级版主 积分 4563 发帖 4545 注册 2007-7-16 来自 BJ #1  微软WINDOWS 矢量可标记语言（VML）缓冲溢出 来源 secunia.com 操作系统 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Server Microsoft Windows XP Home Edition Microsoft Windows XP Professional Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Web Edition Microsoft Windows Storage Server 2003 Microsoft Windows Vista 软件名 Microsoft Internet Explorer 5.01 Microsoft Internet Explorer 6.x Microsoft Internet Explorer 7.x 描述 这可被恶意用来危害用户系统。 VML(vgx.dll)实行时的越界错误使得使用IE的用户在浏览恶意网址时在执行VML时会导致缓冲溢出 溢出成功后允许执行任意代码 解决方案 应用补丁 Internet Explorer 5.01 SP4 for Windows 2000 SP4: http://www.microsoft.com/downloa ... 7-8AE6-DD7FCF89D477 Internet Explorer 6 SP1 for Windows 2000 SP4: http://www.microsoft.com/downloa ... F-824E-757482517612 Internet Explorer 6 for Windows XP SP2: http://www.microsoft.com/downloa ... 0-9DAE-C243CE657FB7 Internet Explorer 6 for Windows XP Professional x64 Edition (optionally with SP2): http://www.microsoft.com/downloa ... 5-AEAB-0EBF1643A5FD Internet Explorer 6 for Windows Server 2003 SP1/SP2: http://www.microsoft.com/downloa ... 0-B3AB-8CD6D8CDD13C Internet Explorer 6 for Windows Server 2003 x64 Edition (optionally with SP2): http://www.microsoft.com/downloa ... 1-BD6F-E5D23EEDBC6B Internet Explorer 6 for Windows Server 2003 for Itanium-based systems SP1/SP2: http://www.microsoft.com/downloa ... 1-9E4B-0CB6BF3D2CB1 Internet Explorer 7 for Windows XP SP2: http://www.microsoft.com/downloa ... E-8A96-9421A0C52C9F Internet Explorer 7 for Windows XP Professional x64 Edition (optionally with SP2): http://www.microsoft.com/downloa ... 7-868A-EC70DA737C21 Internet Explorer 7 for Windows Server 2003 SP1/SP2: http://www.microsoft.com/downloa ... A-8A31-8182EA2D24DB Internet Explorer 7 for Windows Server 2003 x64 Edition (optionally with SP2): http://www.microsoft.com/downloa ... C-92A0-138CB57FE2B5 Internet Explorer 7 for Windows Server 2003 with SP1/SP2 for Itanium-based systems: http://www.microsoft.com/downloa ... 8-81A1-53D46F2DE973     Internet Explorer 7 for Windows Vista: http://www.microsoft.com/downloa ... 6-AAAA-01F5F37C9143 Internet Explorer 7 for Windows Vista x64 Edition: http://www.microsoft.com/downloa ... 4-BD8A-4A2D829DC1A1 ※文章所有权归【pioneer】与【东方微点论坛】共同所有，转载请注明出处！※ 2007-8-16 09:53 论坛跳转: 微点软件公测区 安全快报  > 病毒快报  > 漏洞快报 微点产品在线技术支持  > 微点主动防御软件  > 预升级反馈专区  > 微点杀毒软件 微点用户交流区  > 微点新闻  > 微点软件使用交流  > 微点茶室 安全技术交流区  > 主动防御  > 反病毒  > 防火墙 综合区  > 电脑&数码  > 体育&娱乐&休闲  > 灌水区 版务管理 内部使用专区  可打印版本 | 推荐 | 订阅 | 收藏 [ 联系我们 - 东方微点 ] 北京东方微点信息技术有限责任公司 福建东方微点信息安全有限责任公司 闽ICP备05030815号