okey folkens, dette er en _HELT_ fersk ting som er funnet i Internett Explorer..

From: hush.little.baby@hushmail.com


----BEGIN PGP SIGNED MESSAGE-----

NOMEN NESCIO SECURITY ALERT #9000989 666

Topic: Remote File Execution By Web or Mail: Internet Explorer

Severity: Critical

Datum: 2001-11-21


Affected Systems:
||||||||||||||||||||||||||||||||


Microsoft Internet Explorer 5.01 and 6.00
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows ME
- Microsoft Windows 2000
- Microsoft Windows 2000 SP1
- Microsoft Windows 2000 SP2
- Microsoft Windows 2000 Terminal Services
- Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP1
- Microsoft Windows NT 4.0SP2
- Microsoft Windows NT 4.0SP3
- Microsoft Windows NT 4.0SP4
- Microsoft Windows NT 4.0SP5
- Microsoft Windows NT 4.0SP6
- Microsoft Windows NT 4.0SP6a
Microsoft Internet Explorer 5.0 for Windows NT 4.0
- Microsoft Windows NT 4.0
Microsoft Internet Explorer 5.0 for Windows 98
- Microsoft Windows 98
Microsoft Internet Explorer 5.0 for Windows 95
- Microsoft Windows 95
Microsoft Internet Explorer 5.0 for Windows 2000
- Microsoft Windows 2000
Microsoft Outlook 98
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP1
- Microsoft Windows NT 4.0SP2
- Microsoft Windows NT 4.0SP3
- Microsoft Windows NT 4.0SP4
- Microsoft Windows NT 4.0SP5
- Microsoft Windows NT 4.0SP6
- Microsoft Windows NT 4.0SP6a
- Microsoft Windows NT 4.0SP7
Microsoft Outlook 97
Microsoft Outlook 2000
- Microsoft Windows 2000
- Microsoft Windows 2000 SP1
- Microsoft Windows 2000 SP2
- Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0SP1
- Microsoft Windows NT 4.0SP2
- Microsoft Windows NT 4.0SP3
- Microsoft Windows NT 4.0SP4
- Microsoft Windows NT 4.0SP5
- Microsoft Windows NT 4.0SP6
- Microsoft Windows NT 4.0SP6a
- Microsoft Windows NT 4.0SP7
Microsoft Outlook Express 5.0
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows NT 4.0



Impact:
||||||||||||||||||||||||||||||||


Merely viewing a web page or opening a mail message will trigger the flaw.

Problem:
||||||||||||||||||||||||||||||||


There is a critical flaw within the html parser of Internet Explorer and its interpretation of certain html tags relative to the HKEY_CLASSES_ROOT\htmlfile_FullWindowEmbed key.


Exploit:
||||||||||||||||||||||||||||||||


In accordance with the new suggested policy of responsible disclosure, no exploit and no further details will be made available at this time to the general public or the vendor.

In 60 days from publication of this advisory full working exploits and details will be made available to the general public and vendor at the same time.

Workaround:
||||||||||||||||||||||||||||||||


Create a Registry Entry file .reg, click on it or right click and select merge.

--------------------------------------------------------------------------------


Håper folk får nytte av denne. Benytter annledningen til å spørre om noen har en Essay om "Ungdom og narkotika", eller en abre om ungdom eller bare om narkotik.. alt mottas med _stor_ takk.

kozmic@linux.online.no

PS! For de som ikke fikk det med seg, det er mulig å kjøre kommandoer på maskinen som ser på websiden/får mailen.

Propaganda:

Windows forblir windows, mens operativsystemer som Linux forbedrer seg kontinuelig..