Vulnerability Bulletins |
Actualización de Seguridad para Internet Explorer |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | Microsoft |
| Affected software |
Internet Explorer 5.01 Service Pack 3 (SP3) / Windows 2000 Service Pack 3 Internet Explorer 5.01 Service Pack 4 / Windows 2000 Service Pack 4 Internet Explorer 5.5 Service Pack 2 / Microsoft Windows Millennium Edition Internet Explorer 6 Service Pack 1 / Microsoft Windows 2000 Service Pack 3, Microsoft Windows 2000 Service Pack 4, Microsoft Windows XP Service Pack 1 Internet Explorer 6 Service Pack 1 / Microsoft Windows 98, Microsoft Windows 98 SE, Microsoft Windows Millennium Edition Internet Explorer 6 / Windows XP Service Pack 1 (64-Bit Edition) Internet Explorer 6 / Windows Server 2003 Internet Explorer 6 / Windows Server 2003 64-Bit Edition, Windows XP 64-Bit Edition Version 2003 Internet Explorer 6 / Windows XP Service Pack 2 |
Description |
|
|
Se ha publicado una actualización de seguridad para Internet Explorer que soluciona múltiples vulnerabilidades. Las vulnerabilidades son descritas a continuación: - CAN-2005-0053: Vulnerabilidad en los eventos "Drag and Drop". - CAN-2005-0054: Vulnerabilidad en el manejo de URLs codificadas. - CAN-2005-0055: Vulnerabilidad en el manejo de ciertos métodos DHTML. - CAN-2005-0056: Vulnerabilidad de "cross-domain" mediante archivos CDF (Channel Definition Format). La explotación de estas vulnerabilidades podría permitir a un atacante remoto ejecutar código arbitrario. |
|
Solution |
|
|
Actualización de software Microsoft Internet Explorer 5.01 Service Pack 3 (SP3) / Windows 2000 Service Pack 3 http://www.microsoft.com/downloads/details.aspx?FamilyId=34F5BCDE-4EE2-4EFD-BB60-F5A6BC5F56D1 Internet Explorer 5.01 Service Pack 4 / Windows 2000 Service Pack 4 http://www.microsoft.com/downloads/details.aspx?FamilyId=4C2CBB4B-2F00-4CD6-BB98-AD14A48B53C0 Internet Explorer 6 Service Pack 1 / Microsoft Windows 2000 Service Pack 3, Microsoft Windows 2000 Service Pack 4, Microsoft Windows XP Service Pack 1 http://www.microsoft.com/downloads/details.aspx?FamilyId=E473CD05-3320-4322-B437-F3A61E62F567 Internet Explorer 6 / Windows XP Service Pack 1 (64-Bit Edition) http://www.microsoft.com/downloads/details.aspx?FamilyId=7EAE62C0-3DA0-4BAC-B2FE-ECE89959053D Internet Explorer 6 / Windows Server 2003 http://www.microsoft.com/downloads/details.aspx?FamilyId=4DC0FE8A-9D03-4AB8-8EAF-C85FF25CB1A2 Internet Explorer 6 / Windows Server 2003 64-Bit Edition, Windows XP 64-Bit Edition Version 2003 http://www.microsoft.com/downloads/details.aspx?FamilyId=E3C4DA1F-6FA2-4A2B-A6D9-24B599C353B3 Internet Explorer 6 / Windows XP Service Pack 2 http://www.microsoft.com/downloads/details.aspx?FamilyId=82056EAB-8367-4B04-A11A-1002D14EB55B |
|
Standar resources |
|
| Property | Value |
| CVE |
CAN-2005-0053 CAN-2005-0054 CAN-2005-0055 CAN-2005-0056 |
| BID | |
Other resources |
|
|
Microsoft Security Bulletin MS05-014 http://www.microsoft.com/technet/security/Bulletin/MS05-014.mspx |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2005-02-09 |