- Microsoft Windows systems
Microsoft Internet Explorer (IE) contains a flaw that could allow attackers to run programs of their choice on your computer.
Microsoft IE uses a cross-domain security model to separate content from different sources. A flaw in the model makes IE vulnerable to a cross-domain violation. Attackers could exploit this flaw to execute programs on your computer.
Apply a patch
Micrososft has released a patch to resolve this issue. It is available from Microsoft Windows Update or Microsoft Security Bulletin MS04-025.
Disable Active scripting and ActiveX controls
Instructions for disabling Active scripting and ActiveX controls in the Internet Zone can be found in the Malicious Web Scripts FAQ.
Do not follow unsolicited links
Do not click on unsolicited URLs received in email, instant messages, web forums, or internet relay chat (IRC) channels.
Run and maintain an antivirus product
It is important that you use antivirus software and keep it up to date. Most antivirus software vendors frequently release updated information, tools, or virus databases to help detect and recover from virus infections. Many antivirus packages support automatic updates of virus definitions. US-CERT recommends using these automatic updates when possible.
- US-CERT Technical Alert TA04-163A – <http://www.us-cert.gov/cas/techalerts/TA04-163A.html>
- Vulnerability Note VU#713878 – <http://www.kb.cert.org/vuls/id/713878>
- Microsoft Windows Update – <http://windowsupdate.microsoft.com/>
- Microsoft Security Bulletin MS04-025 – <http://www.microsoft.com/technet/security/bulletin/MS04-025.mspx>
- Malicious Web Scripts FAQ – <http://www.cert.org/tech_tips/malicious_code_FAQ.html>
- Protect Your PC – <http://www.microsoft.com/security/protect/default.asp>
- Increase Your Browsing and E-Mail Safety – <http://www.microsoft.com/security/incident/settings.mspx>
Author: Michael Durkota
Copyright 2004 Carnegie Mellon University. Terms of use
Last updated
Systems Affected Microsoft Windows systems Overview A cross-domain vulnerability in Internet Explorer…
Systems Affected ISC DHCP versions 3.0.1rc12 and 3.0.1rc13 Overview Two vulnerabilities in the ISC DHCP…
Systems Affected Microsoft Windows systems Overview Microsoft has released a security update…
Systems Affected Systems running Internet Explorer and Microsoft Windows Overview Microsoft has…
Systems Affected Microsoft Windows Systems Overview Microsoft has released a Security Bulletin…
Systems Affected Microsoft Windows Systems Overview Microsoft has released a Security Bulletin…
This website uses cookies.