Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

9/11 Cumulative Security Update for IE (834707)

  • 01-12-2004 4:40pm
    #1
    Moderators, Recreation & Hobbies Moderators, Science, Health & Environment Moderators, Technology & Internet Moderators Posts: 93,571 Mod ✭✭✭✭


    http://www.microsoft.com/technet/security/bulletin/ms04-038.mspx

    Updated: November 9, 2004
    If a user is logged on with administrative privileges, an attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system, including installing programs; viewing, changing, or deleting data; or creating new accounts with full privileges. Users whose accounts are configured to have fewer privileges on the system would be at less risk than users who operate with administrative privileges.

    Microsoft recommends that customers install the update immediately.
    Acknowledgments

    Microsoft thanks the following for working with us to help protect customers:

    • Greg Jones of KPMG UK and Peter Winter-Smith of Next Generation Security Software Ltd. for reporting the Install Engine Control Vulnerability (CAN-2004-0216).

    • Mitja Kolsek from ACROS Security for reporting the SSL Caching Vulnerability (CAN-2004-0845).

    • John Heasman of Next Generation Security Software Ltd. for reporting the issue in Hrtbeat.ocx for which a kill-bit has been set in this security update.

    • Liu Die Yu for reporting the Address Bar Spoofing on Double Byte Character Set Locale Vulnerability (CAN-2004-0844) and Plug-in Navigation Address Bar Spoofing Vulnerability (CAN-2004-0843).


Advertisement