Test ID:	1.3.6.1.4.1.25623.1.0.900062
Category:	Windows : Microsoft Bulletins
Title:	Cumulative Security Update for Internet Explorer (958215)
Summary:	This host is missing a critical security update according to; Microsoft Bulletin MS08-073.
Description:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS08-073. Vulnerability Insight: The flaws are due to - error when handling parameters passed to unspecified navigation methods. - error when fetching a file with an overly long path from a WebDAV share. - unspecified use-after-free error. - a boundary error when processing an overly long filename extension specified inside an EMBED tag. Vulnerability Impact: Successful exploitation could result in stack based buffer overflow by sending overly long specially crafted file via web page to corrupt heap memory. Affected Software/OS: Internet Explorer 7 on MS Windows Vista Internet Explorer 6 on MS Windows 2003 and XP Internet Explorer 7 on MS Windows 2003 and XP Internet Explorer 7 on MS Windows 2008 Server Internet Explorer 5.01 and 6 on MS Windows 2000 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4258 Cert/CC Advisory: TA08-344A http://www.us-cert.gov/cas/techalerts/TA08-344A.html Microsoft Security Bulletin: MS08-073 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-073 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5231 http://www.securitytracker.com/id?1021371 http://www.vupen.com/english/advisories/2008/3385 Common Vulnerability Exposure (CVE) ID: CVE-2008-4259 Bugtraq: 20081209 ZDI-08-087: Microsoft Internet Explorer Webdav Request Parsing Heap Corruption Vulnerability (Google Search) http://www.securityfocus.com/archive/1/499065/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-08-087 http://www.zerodayinitiative.com/advisories/ZDI-08-087/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5706 Common Vulnerability Exposure (CVE) ID: CVE-2008-4260 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5903 Common Vulnerability Exposure (CVE) ID: CVE-2008-4261 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=761 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5829
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.