MinorRev: Microsoft Security Bulletin MS03-048 - Cumulative Security Update for Internet Explorer (824145)

From: Russ (Russ.Cooper_at_RC.ON.CA)
Date: 12/16/03

  • Next message: Richard Buckingham: "Re: Problems with Exchange 2000 as open relay" 
    Date:         Tue, 16 Dec 2003 17:37:26 -0500
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

    Reason for Revision:
    V1.2 December 11, 2003: Updated the Windows 2003 Install switches in the
    Security Update Information section.

    Microsoft Security Bulletin MS03-048:
    Cumulative Security Update for Internet Explorer (824145)

    Bulletin URL:
    http://www.microsoft.com/technet/security/bulletin/MS03-048.asp

    Summary:
     Version Number: V1.2
     Revision Date: 12-11-2003
     Impact of Vulnerability: Remote Code Execution
     Maximum Severity Rating: Critical
     Patch(es) Replaced: This update replaces the one that is provided in
    Microsoft Security Bulletin MS03-040, which is itself a cumulative
    update.
     Caveats: None
     CVE Number(s):
    CAN-2003-0814,CAN-2003-0815,CAN-2003-0816,CAN-2003-0817,CAN-2003-0823

    Tested Software:
     Affected Software:
     * Microsoft Windows 98
     * Microsoft Windows 98 Second Edition
     * Microsoft Windows Millennium Edition
     * Microsoft Windows NT(r) Workstation 4.0 Service Pack 6a
     * Microsoft Windows NT Server 4.0 Service Pack 6a
     * Microsoft Windows NT Server 4.0 Terminal Server Edition, Service Pack
    6
     * Microsoft Windows 2000 Service Pack 2, Service Pack 3, Service Pack 4
     * Microsoft Windows XP, Microsoft Windows XP Service Pack 1
     * Microsoft Windows XP 64-Bit Edition
     * Microsoft Windows XP 64-Bit Edition Version 2003
     * Microsoft Windows Server(r) 2003
     * Microsoft Windows Server 2003, 64-Bit Edition

     Affected Components:
     * Internet Explorer 6 Service Pack 1
    <http://www.ntbugtraq.com/link/9D8543E9-0E2B-46C9-B6C6-12DE03860465.asp>
     * Internet Explorer 6 Service Pack 1 (64-Bit Edition)
    <http://www.ntbugtraq.com/link/35F99CF5-3629-4E0E-BF60-24845D2D20C9.asp>
     * Internet Explorer 6 Service Pack 1 for Windows Server 2003
    <http://www.ntbugtraq.com/link/7D0D02DD-8940-48E0-B163-3FCDCB558F21.asp>
     * Internet Explorer 6 Service Pack 1 for Windows Server 2003 (64-Bit
    Edition)
    <http://www.ntbugtraq.com/link/8BEFA1EC-0C48-4B65-989D-58B0CE1E6F95.asp>
     * Internet Explorer 6
    <http://www.ntbugtraq.com/link/4C4D22F0-FBF7-4EA6-9CC2-27D104D4198E.asp>
     * Internet Explorer 5.5 Service Pack 2
    <http://www.ntbugtraq.com/link/E438AFD4-DF70-448C-8925-1075C8BE6C5E.asp>
     * Internet Explorer 5.01 Service Pack 4
    <http://www.ntbugtraq.com/link/C15E2DB3-14E2-43A4-A1A1-676374B66517.asp>
     * Internet Explorer 5.01 Service Pack 3
    <http://www.ntbugtraq.com/link/F4853D8F-F66C-4D8A-9979-3B4F540F90A8.asp>
     * Internet Explorer 5.01 Service Pack 2
    <http://www.ntbugtraq.com/link/221616D4-5893-4DA4-A223-B0DE548D6D83.asp>

     Software Not Affected:

    This email is sent to NTBugtraq automagically as a service to my
    subscribers. (v2.2)

    Cheers,
    Russ - Surgeon General of TruSecure Corporation/NTBugtraq Editor

    -----
    Most viruses these days use spoofed email addresses. As such, using an Anti-
    Virus product which automatically notifies the perceived sender of a message
    it believes is infected may well cause more harm than good. Someone who did
    not actually send you a virus may receive the notification and scramble
    their support staff to find an infection which never existed in the first
    place. Suggest such notifications be disabled by whomever is responsible for
    your AV, or at least that the idea is considered.
    -----

  • Next message: Richard Buckingham: "Re: Problems with Exchange 2000 as open relay"

    Relevant Pages

    • [NT] Multiple Vulnerabilities in Internet Explorer (Heap Corruption, Race Condition)
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... The heap corruption and race condition in Internet Explorer allow ... * Windows XP Professional with Service Pack 2 ... Pack 3, on Microsoft Windows 2000 Service Pack 4, or on Microsoft Windows ...
      (Securiteam)
    • Alert: Microsoft Security Bulletin MS04-025 - Cumulative Security Update for Internet Explorer (8678
      ... Cumulative Security Update for Internet Explorer ... Microsoft Windows NT Server 4.0 Service Pack 6a ... Microsoft Windows Server 2003 64-Bit Edition ...
      (NT-Bugtraq)
    • [EXPL] Microsoft Internet Explorer COM Objects Instantiation (Exploit, MS05-038)
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... A remote code execution vulnerability exists in the way Internet Explorer ... * Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service ...
      (Securiteam)
    • Neuer Security Alert 11. Mai 2004
      ... SECURITY BULLETIN RELEASE ... 11 May 2004 Microsoft is releasing one security update ... for a newly discovered vulnerability in Microsoft Windows. ... - Microsoft Windows XP and Microsoft Windows XP Service Pack 1 ...
      (microsoft.public.de.security.netzwerk.sicherheit)
    • Neuer Security Alert 11. Mai 2004
      ... SECURITY BULLETIN RELEASE ... 11 May 2004 Microsoft is releasing one security update ... for a newly discovered vulnerability in Microsoft Windows. ... - Microsoft Windows XP and Microsoft Windows XP Service Pack 1 ...
      (microsoft.public.de.security.heimanwender)