int(4993)

Vulnerability Bulletins


Múltiples vulnerabilidades en Microsoft Internet Explorer

Vulnerability classification

Property Value
Confidence level Oficial
Impact Obtener acceso
Dificulty Experto
Required attacker level Acceso remoto sin cuenta a un servicio estandar

System information

Property Value
Affected manufacturer Microsoft
Affected software Microsoft Internet Explorer 5, 6, 7 y 8

Description

Se han descubierto múltiples vulnerabilidades en Microsoft Internet Explorer. Las vulnerabilidades residen en errores en el manejo de la memoria al renderizar páginas web.

Un atacante remoto podría ejecutar código mediante páginas web especialmente diseñadas.

Este boletín reemplaza al MS09-054.

Solution



Actualización de software

Microsoft (MS09-072)
Windows 2000 SP4 / Internet Explorer 5.01 SP4 / patch IE5.01sp4-KB976325-Windows2000sp4-x86-ENU
Windows 2000 SP4 / Internet Explorer 6 SP4 / patch IE6.0sp1-KB976325-Windows2000-x86-ENU
Windows XP SP2 y SP3 / Internet Explorer 6 / patch WindowsXP-KB976325-x86-ENU
Windows XP Professional x64 Edition / Internet Explorer 6 / patch WindowsServer2003.WindowsXP-KB976325-x64-ENU
Windows Server 2003 SP1/SP2 / Internet Explorer 6 / patch WindowsServer2003-KB976325-x86-ENU
Windows Server 2003 x64 Edition / Internet Explorer 6 / patch WindowsServer2003.WindowsXP-KB976325-x64-ENU
Windows Server 2003 with SP1/SP2 para Itanium-based Systems / Internet Explorer 6 patch / WindowsServer2003-KB976325-ia64-ENU
Windows XP SP2/SP3 / Internet Explorer 7 / patch IE7-WindowsXP-KB976325-x86-ENU
Windows XP Professional x64 Edition / Internet Explorer 7 / patch IE7-WindowsServer2003.WindowsXP-KB976325-x64-ENU
Windows Server 2003 SP1/SP2 / Internet Explorer 7 / patch IE7-WindowsServer2003-KB976325-x86-ENU
Windows Server 2003 x64 Edition / Internet Explorer 7 / patch IE7-WindowsServer2003.WindowsXP-KB976325-x64-ENU
Windows Server 2003 with SP1/SP2 para Itanium-based Systems / Internet Explorer 7 / patch IE7-WindowsServer2003-KB976325-ia64-ENU
Windows Vista / Internet Explorer 7 / patch
Windows6.0-KB976325-x86
Windows Vista x64 Edition / Internet Explorer 7 / patch Windows6.0-KB976325-x64
Windows Server 2008 para 32-bit Systems / Internet Explorer 7 / patch Windows6.0-KB976325-x86
Windows Server 2008 para x64-based Systems / Internet Explorer 7 / patch Windows6.0-KB976325-x64
Windows Server 2008 para Itanium-based Systems / Internet Explorer 7 / patch Windows6.0-KB976325-ia64
Windows Server 2008 para 32-bit Systems / Internet Explorer 8 / patch Windows6.1-KB976325-x86
Windows Server 2008 para x64-based Systems / Internet Explorer 8 / patch Windows6.1-KB976325-x64
Windows Server 2008 para Itanium-based Systems / Internet Explorer 8 / patch Windows6.1-KB976325-ia64
Windows 7 x86/ Internet Explorer 8 / patch Windows6.1-KB976325-x86
Windows 7 x64 / Internet Explorer 8 / patch Windows6.1-KB976325-x64
Windows 7 ia64 / Internet Explorer 8 / patch Windows6.1-KB976325-ia64
http://www.microsoft.com/downloads

Standar resources

Property Value
CVE CVE-2009-3671
CVE-2009-3672
CVE-2009-3673
CVE-2009-3674
BID

Other resources

Microsoft Security Bulletin (MS09-072)
http://www.microsoft.com/technet/security/bulletin/ms09-072.mspx

Version history

Version Comments Date
1.0 Aviso emitido 2009-12-15
Ministerio de Defensa
CNI
CCN
CCN-CERT