Si informano gli utenti che utilizzano sistemi operativi Microsoft che
\nsono stati rilasciati degli aggiornamenti critici di sicurezza per
\nInternet Explorer. Per tanto si raccomanda di provvedere, se non ancora
\nfatto, all`aggiornamento delle proprie macchine.<\/p>\n
Domenica Quartarella
\nServizio Calcolo<\/p>\n
—–BEGIN PGP SIGNED MESSAGE—–
\nHash: SHA1<\/p>\n
Technical Cyber Security Alert TA05-347A<\/p>\n
Microsoft Internet Explorer Vulnerabilities<\/p>\n
Original release date: December 13, 2005
\n Last revised: —
\n Source: US-CERT<\/p>\n
Systems Affected<\/p>\n
* Microsoft Windows
\n * Microsoft Internet Explorer<\/p>\n
For more complete information, refer to the Microsoft Security
\n Bulletin Summary for December 2005.<\/p>\n
Overview<\/p>\n
Microsoft has released updates that address critical vulnerabilities
\n in Internet Explorer (IE). A remote, unauthenticated attacker could
\n exploit these vulnerabilities to execute arbitrary code or cause a
\n denial of service on an affected system.<\/p>\n
I. Description<\/p>\n
The Microsoft Security Bulletins for December 2005 address
\n vulnerabilities in Microsoft Windows and Internet Explorer. By
\n convincing a user to view a specially crafted HTML document, such as a
\n web page or an HTML email message or attachment, an attacker could
\n execute arbitrary code with the privileges of the user. The attacker
\n could also cause IE or the program using the WebBrowser control to
\n crash.<\/p>\n
Further information is available in the following US-CERT
\n Vulnerability Notes:<\/p>\n
VU#887861 – Microsoft Internet Explorer vulnerable to code execution
\n via mismatched DOM objects<\/p>\n
Microsoft Internet Explorer fails to properly handle requests to
\n mismatched DOM objects, which may allow a remote attacker to execute
\n arbitrary code on a vulnerable system.
\n (CVE-2005-1790)<\/p>\n
VU#959049 – Several COM objects cause memory corruption in Microsoft
\n Internet Explorer<\/p>\n
Microsoft Internet Explorer allows instantiation of COM objects not
\n designed for use in the browser, which may allow an attacker to
\n execute arbitrary code or crash IE.
\n (CVE-2005-2127)<\/p>\n
II. Impact<\/p>\n
A remote, unauthenticated attacker exploiting these vulnerabilities
\n could execute arbitrary code with the privileges of the user. If the
\n user is logged on with administrative privileges, the attacker could
\n take complete control of an affected system or cause a denial of
\n service.<\/p>\n
III. Solution<\/p>\n
Apply Updates<\/p>\n
Microsoft has provided the updates for these and other vulnerabilities
\n in the December 2005 Security Bulletins and on the Microsoft Update
\n site.<\/p>\n
Disable ActiveX<\/p>\n
Disable ActiveX in the Internet Zone to further protect against the
\n vulnerabilities described in VU#959049 and VU#680526. Instructions for
\n disabling ActiveX are available in the CERT\/CC Malicious Web Scripts
\n FAQ. Note that disabling ActiveX will reduce the functionality of some
\n web sites.<\/p>\n
The updates provided by MS05-037, MS05-038, MS05-052, and MS05-054
\n block COM objects known to be vulnerable, however there may be more.<\/p>\n
Appendix A. References<\/p>\n
* Microsoft Security Bulletin Summary for December 2005 – * Microsoft Security Bulletin MS05-054 – * Microsoft Security Bulletin MS05-052 – * Microsoft Security Bulletin MS05-038 – * Microsoft Security Bulletin MS05-037 – * US-CERT Vulnerability Note VU#887861 – * US-CERT Vulnerability Note VU#959049 – * US-CERT Vulnerability Note VU#680526 – * CVE-2005-1790 – * CVE-2005-2127 – * CERT\/CC Malicious Web Scripts FAQ – * Improve the safety of your browsing and e-mail activities – * Security Essentials – * Microsoft Update – <update.microsoft.com\/microsoftupdate<\/a>><\/p>\n _________________________________________________________________<\/p>\n The most recent version of this document can be found at:<\/p>\n <www.us-cert.gov\/cas\/techalerts\/TA05-347A.html<\/a>><\/p>\n _________________________________________________________________<\/p>\n Feedback can be directed to US-CERT Technical Staff. Please send _________________________________________________________________<\/p>\n For instructions on subscribing to or unsubscribing from this _________________________________________________________________<\/p>\n Produced 2005 by US-CERT, a government organization.<\/p>\n Terms of use:<\/p>\n
\n <www.microsoft.com\/technet\/security\/bulletin\/ms05-dec.mspx<\/a>><\/p>\n
\n <www.microsoft.com\/technet\/security\/bulletin\/MS05-054.mspx<\/a>><\/p>\n
\n <www.microsoft.com\/technet\/security\/bulletin\/MS05-052.mspx<\/a>><\/p>\n
\n <www.microsoft.com\/technet\/security\/bulletin\/MS05-038.mspx<\/a>><\/p>\n
\n <www.microsoft.com\/technet\/security\/bulletin\/MS05-037.mspx<\/a>><\/p>\n
\n <www.kb.cert.org\/vuls\/id\/887861<\/a>><\/p>\n
\n <www.kb.cert.org\/vuls\/id\/959049<\/a>><\/p>\n
\n <www.kb.cert.org\/vuls\/id\/680526<\/a>><\/p>\n
\n <cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2005-1790<\/a>><\/p>\n
\n <cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2005-2127<\/a>><\/p>\n
\n <www.cert.org\/tech_tips\/malicious_code_FAQ.html#ie56<\/a>><\/p>\n
\n <www.microsoft.com\/athome\/security\/online\/browsing_safety.m<\/a>
\n spx><\/p>\n
\n <www.microsoft.com\/athome\/security\/protect\/default.aspx<\/a>><\/p>\n
\n email to <cert@cert.org<\/a>> with “TA05-347A Feedback VU#887861” in the
\n subject.<\/p>\n
\n mailing list, visit <www.us-cert.gov\/cas\/signup.html<\/a>>.<\/p>\n