__________________________________________________________ The U.S. Department of Energy Computer Incident Advisory Center ___ __ __ _ ___ / | /_\ / \___ __|__ / \ \___ __________________________________________________________ INFORMATION BULLETIN Microsoft Internet Explorer Cumulative Patch [Microsoft Security Bulletin MS02-005] February 12, 2002 18:00 GMT Number M-041 ______________________________________________________________________________ PROBLEM: Six vulnerabilities have been found in Internet Explorer, the most serious of which allows an intruder to remotely run code on another users system. PLATFORM: Windows Platforms with Internet Explorer 5.01 SP2, 5.5 SP1 and SP2, or 6.0. DAMAGE: Depending on the vulnerability, an intruder can read or execute files on a client system and possibly get remote access to the system. SOLUTION: Apply the 11 February 2002 Cumulative Patch for Internet Explorer available on the Microsoft windowsupdate website. ______________________________________________________________________________ VULNERABILITY The risk is HIGH. Remote users can run code on a clients system ASSESSMENT: and possibly get user access on that system. ______________________________________________________________________________ LINKS: CIAC BULLETIN: http://www.ciac.org/ciac/bulletins/m-041.shtml ORIGINAL BULLETIN: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/ security/bulletin/MS02-005.asp PATCHES: http://windowsupdate.microsoft.com ______________________________________________________________________________ - -+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+ This message was posted through the FIRST mailing list server. Contact your team's FIRST representative to (un)subscribe, DO NOT REDISTRIBUTE BEYOND MEMBERS OF FIRST TEAMS UNLESS THE AUTHOR OF THIS MESSAGE GRANTS EXPRESS PERMISSION TO REDISTRIBUTE - -+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+ - ------------ Output from pgp ------------ Signature by unknown keyid: 0x6CCB7419 -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.0i for non-commercial use Charset: noconv iQCVAwUBPGv0bekli63F4U8VAQFc2gP+N4keuSfKjPf9YROUnrSUteWPEVR50Ji9 5ZIWSrXbU/CeXDtdwPAEdUX1NTxAhK/h66TwnBSV7n8F0AuLQCJ0hcZ7I2jGsRdU CvQJResYvxU68eSUD16ql4z5glXLz99DkGW+5cN6gEchuTGb/JVFzKsDq27WTenv wVy1ULb3MA8= =xb42 -----END PGP SIGNATURE-----