Update Protection against Microsoft Internet Explorer HTML Component Handling Remote Code Execution Vulnerability (MS09-054)
| Check Point Reference: | CPAI-2009-222 | |
| Date Published: | ||
| Severity: | ||
| Source: | Microsoft Security Bulletin MS09-054 | |
| Industry Reference(s): | CVE-2009-2529 | |
| Protection Provided by: |
Security Gateway
|
|
| Who is Vulnerable? Internet Explorer 6 SP1 when installed on Microsoft Windows 2000 SP4 Internet Explorer 6 for: Internet Explorer 7 on: Internet Explorer 8 on: | ||
| Vulnerability Description A remote code execution vulnerability exists in the way that Internet Explorer handles argument validation of a variant in specific situations. An attacker could exploit this issue by constructing a specially crafted Web page that when viewed by a user, could allow the attacker to execute arbitrary code remotely. |
||
|
Update/Patch Available Apply patches: Microsoft Security Bulletin MS09-054 |
|
|
Vulnerability Details The vulnerability occurs when Internet Explorer validates arguments incorrectly under specific circumstances, it may corrupt system memory in such a way that an attacker could execute arbitrary code on the vulnerable system. |
Protection Overview
This protection will detect and block attempts to exploit this vulnerability.
In order for the protection to be activated, update your Security Gateway/VPN-1 product to the latest IPS/SmartDefense update. For information on how to update IPS/SmartDefense, go to SBP-2006-05, Protection tab and select the version of your choice.
To configure the defense, select your product from the list below and follow the related protection steps.